Cisco VSS Dual-active PAgP detection via Nexus and vPC

Hi!
We will soon implement Cisco nexus 5595 in our Datacenter.
However we will still be using a pair of C6500 in a VSS in some part of the network.
Today we are running dual-active detection via a PAgP Port-channel, but those Port-channels will be removed and the only Port-channel we will have is to a pair of Nexus 5596.
Does anyone know if we can run PAgP dual-active detection via this MEC/vPC?
Thank you for your time!
//Olle

Hi,
The easies way is to connect both links from the 6500s to only one of the Nexus switches. Than create a portchannel on both the 6500 and the Nexus.
The other option would be to connect the 6500s directly together via a gig link and use fast hello instead of epagp.
I would use fast hello since it is supported on the 6500s.
HTH

Similar Messages

Cisco VSS dual-active fast-hello not supported

Hi,
I have Cisco WS-C4510R+E with sup WS-X45-SUP7-E. IOS version on this switch is cat4500e-universal.SPA.03.04.05.SG.151-2.SG5.bin . Enterprises license is permanently installed on switch. I have configured VSS on this but i am not able to configure dual-active fast-hello on L2 link. only dual-active detection using PagP is supported. since we don't have neighboring devices support PagP. I want to use dual-active fast-hello using L2 links between two VSS switches.
I believe dual-active fast-hello on L2 link is supported on Release 3.6.1E. Please confirm whether i will have to change current IOS release from 3.4.5SG to Release 3.6.1E to support dual-active fast-hello link.
I also want to know what will be major features change if I upgrade current IOS release from 3.4.5SG to Release 3.6.1E
Regards

Hi,
dual-active fast-hello is supported from release 3.5.0
(reference link: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/release/note/OL_29985-01.html )
so is also supported in release 3.6.1 .
You can see all feature changes in release notes for version 3.6.X
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/release/note/OL_32143-01.html#pgfId-2657932
Best Regards,
Alessandro

Stackwise 3850 for VSS dual active detection

Hello
by means of 3750 or 2960-S stacks, it was impossibile to perform VSS dual active detction
using ePAgP trough a MEC towards different members of a stack.
Here the QA docs for 3850 state it is now supported:
http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3850-series-switches/qa_c67-722110.html
Though, I'd like to read some confirmation from someone already using it in production or maybe
from some up to date Cisco representative.
I'd like to use lots of 3850 stacks as access switches linked to a 6500 VSS pair. In order to keep
everything redundant i would like to couple VSLP Fast Hellos and ePAgP trough the Stackwise 3850s
but not before making myself sure it's actually supported.
Thanks
francesco

Francesco,
I have deployed stacks of up to five 3850 switches with stackwise and powerstack cables, there are no issues running active/active on redundant links. I recommend using LACP.

6880-X VSS dual-active detection with Enhanced PAgP

Hello,
I plan to use Enhanced PAgP for dual-active detection for a VSS consisting of 6880-X.
Has anybody tested it?
What about the 6800IA switch - does it have a similar feature that can help the active switch in the VSS to find out if the former standby has become also active?
Thanks, kind regards,
Eduard Gheorghiu

hey, i ran this up in the lab, the FEX itself runs dual active detection without the need for PAGP.
see below info:
switch#show fex dual-active
FEX dual-active detection enabled: Yes
Channel Group 101 (FEX 101)
Splitbrain detection capable: Yes
switch 1 member port state:
Te1/5/2 - Interface Up. state: bound
Te1/5/3 - Interface Up. state: bound
switch 2 member port state:
Te2/5/2 - Interface Up. state: bound
Te2/5/3 - Interface Up. state: bound
Channel Group 102 (FEX 102)
Splitbrain detection capable: Yes
switch 1 member port state:
Te1/5/4 - Interface Up. state: bound
switch 2 member port state:
Te2/5/4 - Interface Up. state: bound
switch#show switch virtual dual-active summary
Pagp dual-active detection enabled: Yes
Fast-hello dual-active detection enabled: Yes
FEX dual-active detection enabled: Yes
No interfaces excluded from shutdown in recovery mode
In dual-active recovery mode: No
switch#
switch#show fex
FEX FEX FEX FEX
Number Description State Model Serial
101 FEX0101 online C6800IA-48FPD FOC1740Y33Y
102 FEX0102 online C6800IA-48FPD FOC1741S58T

4500X VSS - Dual Active Detection with ePAgP

Hello,
I am interesting if 3560x supports ePAgP. I have VSS which is formed by two 4500x switches. Can I use 3560x, which is connected two both VSS members via 10Gb optics for Dual Active detection ?

Hi,
As PagP is not supported accross differents 3750(-X) units of a stack (but LACP yes), ePagp is not supported also. The MEC has to be formed from the same 3750(-X) unit / Standalone 35xx and 37xx do support PAgPand thus ePAgP.
Page 17 and 20 of http://www.cisco.com/web/DK/assets/docs/presentations/VSS_0109.pdf =>
"Since cross-stack EtherChannel does not support PAgP, it can not use enhanced PAgP for dual ACTIVE detection.
Hence the only alternative for cross-stack EtherChannel configuration is to use BFD as a dual ACTIVE detection method"
Hope it helps.
Regards;
Inayath

VSS Dual active detection

Does the PAgP mode working with Nortel as access switches.
(The symptom is that when the VSL link is down both switches working as a active , when the vsl came back the switches recognize dual active and the backup switch disable all non vsl ports)

You mean one VSS member switch in one datacenter, and the other member switch in the second datacenter?
I wouldn't recommend doing VSS across WAN/MAN.
Remember the dual active detection using enhanced PAgP is done through downstream switches that have MEC to the VSS chassis'.
This means one link goes to the local VSS member switch, and the other link would go through the WAN, onto the other VSS member switch.
Also, the main benefit of doing VSS is to cut down your spanning-tree domain.
To really take advantage of that you'd have uplinks from downstream switches to both VSS member switches across WAN/MAN, which just isn't an efficient way to mesh your switches.

Automated Proxy detection via DNS and wpad.dat

Safari for Windows 4.0.4
Windows XP SP3
How can I have Safari automatically detect Proxy LAN Settings via our in house DNS Server.
1. I have successfully implented wpad options via DHCP which works well with IE.
2. I have successfully created a CNAME DNS record that points our in house web server which hosts wpad.dat which works well with Firefox.
3. How can we make this work for Safari without having to manually configure it. On laptops and mobile devices it can be a real pain having to configure it from Network Proxy to Network Proxy on different networks. I would prefer not to have to type a URL to different wpad.dat files everytime.
Any Suggestions?

I do not have those options set in DHCP because we do not use these as PIN-authenticated phones. The phone is registering fine and is learning the correct URL:
BaseURL = http://xyz-lyncfe-02.xyz.net/RequestHandler/Files/UCPhone/POLYCOM/CX600/Rev-5/ENU/4.0.7577.4444/CPE
Are you saying that the phone will bypass the proxy if it learns the server name via DHCP but it will use the proxy (and ignore the local names list in wpad.dat) if it learns the name via DNS-based discovery and SIP registration?

Facebook Security/Active Session Question via iPhone and Safari

I am running Mac OS 10.8.3 with Safari 6.0.4 on an iMac. On Facebook using Safari, I set up "Login Approvals" which would require a security code. However, every once in a while under the "Active Sessions" I noticed an unknown session from an iOS 6 device from a different location other than the state I live in. I ended that activity. As a test, I accessed my Facebook account using my iPhone 5. I noticed that under Facebook's Active Sessions on Safari on my iMac, it lists my iPhone device as being in a different state. Why is that? Is there some general iPhone setting that I need to change?

Hi, Thanks for the suggestion!
To look at the keychain sounds helpful to solve the problem. It seems top be a problem with accessibility. I will have a look. But I also have decided to extend my RAM - since it is very true 128 MB really isn't much.
Then for clarity:
I have not followed an email link to download the security upgrade, but I used the usual software update manager - I just didn't find the proper english description, since my eMac talks german with me.
I had had a look into some protokolls "system.log" - well I don't understand much what is written down there. There I might have got the confusion about the security server.
There are several lines with Safari, like this one:
date + time: localhost/Applications/Safari.app/Contens/MacOS/Safari:
InitializeDiskArbitrationMessages: DiskArbitraitionRegister failed 1102
The same is noticed about Mail
These messages are followed by several lines telling:
date + time: localhost lookupd[623]: NetInfo connection failed for server 127.0.0.1/local
But I am afraid, I don't really know what this means.

Pagp dual-active for VSS on 3750

Hi all,
Do I need to be connected to VSS switch to see if my switch supports dual-active pagp?
Should I be able to use this 3750 for dual-active detection?
thank you.
INFO:
Switch Ports Model              SW Version            SW Image
*    1 52    WS-C3750-48TS      12.2(46)SE            C3750-IPSERVICES-M
Switch#        sh pagp dual-active
PAgP dual-active detection enabled: Yes
PAgP dual-active version: 1.1
Channel group 3
          Dual-Active     Partner              Partner   Partner
Port      Detect Capable Name                 Port      Version
Gi1/0/1   No              None                 None      N/A
Gi1/0/3   No              None                 None      N/A
Switch#
From what I can read here this 3750 should support dual-active detection
http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios-software-releases-12-2-special-early-deployments/product_bulletin_c25-493554.html

Yes, that is correct. You can use the 3750 for dual active detection.
HTH

Dual-active fast-hello

Hi,
Anyone aware if Cisco supports dual-active fast-hello on Sup7L-E or will they support it any time soon on the 4500-E platform.
(config-vs-domain)#dual-active detection ?
pagp Dual-active detection using PAgP
Thanks

Hi,
Have not seen it in any release notes. It is probably on the road map for later, if there are enough requests for it.
HTH

Dual-active detection for VSS via enhanced PAGP

Hello,
What is the configuration needed on an etherchannel PAGP trunk to enable dual active detection for VSS on 4500X ?
I have enabled it on my vss in global mode but I don't know which vlan to allow on the trunk towards my switch in PAGP.
Is it the native vlan that I should allow on the trunk ?
Thanks for the help
Jeremy

Hi Jeremy,
You can allow all the vlans of specific vlans under the portchannel that connects to the access switches. Usually, best practice is to allow only the vlans you are using on that specific access switch.
Dual-active detection command is applied under the VSS domain for the specific portchannel connecting to your access switches. It is not per vlan.
Have a look
http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/15.1.2/XE_340/configuration/guide/vss.html#wp1063913
HTH

4500-X VSS and Dual-Active detection PAgP, using 2960-X access stacks

Hi.
I think this may have been asked before but its not clear to me.
I have 2 4500-X configured as a VSS pair, so a VSL link of 2 x 10Gig between them.
I have a number of Access stacks, built from 2600-X's
I have tried to configure dual active detection, which from what I read it is to use ePAgP or Dual-Active Fast hello Packets.
I do not have any additional SFP's to connect the 4500's together using Fast Hello, so ePAgP appears my only option
When I try and configure the access stack with an Etherchannel across 2 switches using PAgP I get the error -
command rejected by the 2960-x stack
%With PAgP enabled, all ports in the Channel should belong to the same switch
Command rejected (Port-channel11, Te1/0/1): Invalid etherchnl mode
From what I have read, PAgP cannot be configured across a stack, and people are recommending LACP as the method to configure the Etherchannnel, but How does that work with Dual-Active detection PAgP?
When I configuring Dual-Active detection PAgP, and made a couple of the MEC's trusted and configure using LACP active, then tried failing the VSL between the 4500's, each stack went into err disable on the trunk connections.
Question is! Does dual active detection PAgP work over an Etherchannel configured as LACP? or what's my options
Thanks for any help.

Hi,
Question is! Does dual active detection PAgP work over an Etherchannel configured as LACP? or what's my options
No, you can't use LACP for ePAGP detection. One option is to break one of the stacks in your access layer and use the switch you want to use for dual active detection individually (not part of a stack) and uplink it to both 4500X switches. This way, you know that the single switch is used for ePAgP detection.
HTH

VSS using Pagp+ Dual Active Detection

I am going to use VSS with a C3750 'Access' switch running 12.2(46)SE that supports Pagp+ for dual active detection. Regarding this topology, i have some questions:
1) Does my Etherchannel towards the C3750 stack need to be a Pagp Etherchannel ? Or can it be a fixed Etherchannel (mode on) ?
2) If the Etherchannel needs to be a Pagp Etherchannel before VSS can use the Pagp+ packets, does this imply that i can't use a cross-stack Etherchannel on the C3750, because cross-stack etherchannel did not support Pagp before ? Is it supported on 12.2(46)SE ?

It is -very- easy to configure.
Just connect two interfaces back-to-back together, of course, following a different path as your VSL links, then:
interface GigabitEthernet2/4/14
no switchport
no ip address
dual-active fast-hello
end
interface GigabitEthernet1/4/14
no switchport
no ip address
dual-active fast-hello
end
And that's all.
VSS_SWITCH#sh switch virtual dual-active fast-hello
Fast-hello dual-active detection enabled: Yes
Fast-hello dual-active interfaces:
Port Local State Peer Port Remote State
Gi1/4/14 Link up Gi2/4/14 Link up

4500x Dual Active Detection with LACP

Hi Guys
I have configured 2 4500x switches as a vss pair and vss is working fine. These will be connected to 2 stacks of 3750x switches with each stack having 2 switches.
4500x
3750x Stack1 3750xStack2
From Switch
Port No
Channel Group
To Switch
Port No
Channel Group
Media Type
Comment
3750X Stack1
Ten 1/1/1
1
4500X
Ten 1/1/1
1
10Gb SPF+
3750X TO 4500X Interlinks
3750X Stack1
Ten 2/1/1
1
4500X
Ten 2/1/1
1
10Gb SPF+
3750X TO 4500X Interlinks
3750X Stack2
Ten 1/1/1
2
4500X
Ten 1/1/2
2
10Gb SPF+
3750X TO 4500X Interlinks
3750X Stack2
Ten 2/1/1
2
4500X
Ten 2/1/2
2
10Gb SPF+
3750X TO 4500X Interlinks
4500x
Ten1/1/14
4500x
Ten1/1/14
10Gb SFP+
Dual-Active-Detection
4500x
Ten1/1/15
4500x
Ten1/1/15
10Gb SPF+
VSL Link
4500x
Ten1/1/16
4500x
Ten1/1/16
10Gb SPF+
VSL Link
The ports will be connected as above. From each stack there are 2 uplinks, 1 to each of the 4500x but virtually to the same 4500x as they are a virtual pair.
I have't configured the uplinks yet as im trying to get the dual active detection done first, in the config on the 4500x it does not give me the option for fast-hellos, it only list pagp
Switch(config-vs-domain)#dual-active detection ?
pagp Dual-active detection using PAgP
Anyone know why this may be
Thanks

Hi,
As per configuration guide for this platform we do have enhanced pagp only as dual active detection mechanism;
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/15-1-2/XE_340/configuration/guide/config/vss.html#wp1063718
Thanks,
Parminder

4500X with VSS and Dual-Active Fast-Hello

Hello,
ich have two pairs of 4500X-32, with other word two vss-systems in a test environment. IOS running version is 03.05.02.E.152-1.E2, dual-active detection with a fast-hello link is running. When i pull the VSL connectors to simulate a failure the active switch go into recovery-mode. After the vsl is restored the switch in recovery-mode start a reboot as desired. The configuration is saved and if i repeat the procedure, all is working fine. But when i start the systems the next day and begin to test the dual-active detection again, the vsl port stucks in " waiting to be aggregated" after restoring it. No reboot happens, the only solution is to reboot the switch manually. After that this misbehavior is repeating. Only setting the dual-active detection interfaces to its default, and reconfiguring them for fast-hello dual active detection again brings the feature back to normal operation:
interface TenGigabitEthernet1/1/12
switchport mode access
switchport nonegotiate
dual-active fast-hello
Both vss systems shows the same behavior from time to time, i have no explanation, can somebody help?
Regards, Stephan

Fast hello is not supported for the 4500 series unless you are running the latest version of the IOS (3.5E)
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/XE3-5-0E/15-21E/configuration/guide/config/vss.html#87652
HTH

Cisco VSS Dual-active PAgP detection via Nexus and vPC

Similar Messages

Maybe you are looking for