Routing issue in Nexus 7009 due to vPC or hsrp

we have two site's, on first site we have two nexus 7009 switches (Nexus A & Nexus B) and other site is remote site having two 6500 switches. (design attached)
we are using hsrp on nexus switches and Active is Nexus A for all vlan’s
From one of my remote site user's (user's are in vlan 30 ) are not able to communicate with nexus site vlan 20 specially if host in vlan 20 take forwarding path from nexus switch B,
I can ping the vlan 20 both physical address's and gateway (vlan 20 configured in both nexus switch and using HSRP) from vlan 30 which configured on remote site 6500 switch
ospf with area 0 is the routing protocol running between both site.
vlan 10 we are using as a management vlan on both nexus switch that building neighbore ship with WAN router, it's means wan router have two neighbors nexus A and nexus B, but nexus B building the neigbhorship via a Nexus A because from WAN router we have single link which is terminated on Nexus A,
there is one layer 2 switch between nexus A and WAN router, nexus A site that switch port in vPC because we are planning to pull second link later to nexus B.
All user's are connected with edge switch and edge switch have a redundant uplink to nexus A and B with vPC configured
After troubleshooting we observe that if user in vlan 20 wants to communicate with vlan 30 (remote site), traffic is taking Nexus B is forwarding path, then gets drops.
I run the tracert from pc its showing route till SVI on Nexus B after that seems packets not finding route. Even vlan 30 routes are available in the routing table of Nexus B. we don’t have any access-list and Firewall between this path.

Hi,
I suspect in your scenario that traffic is being dropped due to the characteristics of vPC, the routing table on Nexus-B may reflect the next-hop address for the destination IP, however if that next-hop address is the address of the Nexus-A off of VLAN 20 then it will be forwarded across the vPC peer-link, this breaks the convention.
When you attach a Layer 3 device to a vPC domain, the peering of routing protocols using a VLAN also carried on the vPC peer-link is not supported. If routing protocol adjacencies are needed between vPC peer devices and a generic Layer 3 device, you must use physical routed interfaces for the interconnection.
You can configure VLAN Interfaces for Layer 3 connectivity on the vPC peer devices to link to Layer 3 of the network for such applications as HSRP and PIM. However, Cisco recommend that you configure a separate Layer 3 link for routing from the vPC peer devices, rather than using a VLAN network interface for this purpose.
Take a look at the following URL, this article helps to explain the characteristics of vPC and routing over the peer-link:
http://bradhedlund.com/2010/12/16/routing-over-nexus-7000-vpc-peer-link-yes-and-no/
Regards
Allan.
Hope you find this is helpful.
Sent from Cisco Technical Support iPad App

Similar Messages

No airtunes with pppoE due to routing issues?

I just switched to an optical fiber to the home internet connection (which is getting pretty popular here in Japan). Needless to say, the network is very fast, however, I can no longer use airtunes via my airport express network. The airport express stations (both of them) no longer show up in iTunes. My guess is that this is due to a routing issue and the same problem must have been encountered by others before and hopefully solved. The new internet connection uses pppoE to make a connection to the internet service provider. This gives me an internet address of the form 125.197.xx.yy. I still have my airport express set to get an address via dhcp (which the new optical fiber hub provides) and is of the typical private network form 192.168.1.4. When I am connected by pppoE to the internet, my iTunes cannot see my airport express due to routing issues I assume. Is there an elegant solution to this -- can I use my airtunes and the internet at the same time? Would modifying the internet routing help here (I have used this before when I have had multiple interfaces going (e.g. one in a secure local lan and the other supporting an internet connection via ssh to the outside world). Any advise would be much appreciated. I haven't tried asking my airport express to log in via pppoE -- is this the only solution?

Well as I have for my last several posts -- I solved the problem myself. I am pretty sure that the root cause was a routing problem (pretty obvious in fact). By have the airport express base station connect via pppoE itself (I have a remote relay airport express as well) and switching to NAT and DHCP distribution of addresses via the airport express, I can both see my airtunes as well as my ethernet connection. It is a non-ideal solution as I have a fixed IP which would have been convenient to log in from outside to, but I guess I can live with that.

Routing issue- seeing same IPs for two hops

Hello All,
I'm seeing two same IPs in the traceroute output. Is that due to routing issue that nexhop is as the same device for the first time?
Log:
6 10.30.102.26 61.060 ms 10.30.100.142 61.266 ms 10.30.102.26 61.071 ms
7 10.30.102.26 61.139 ms 61.211 ms 10.61.191.2 60.948 ms
Can you guys help me to fix the issue??
Regards,
Thiyagu

Are you load balancing anywhere?
6 10.30.102.26 61.060 ms
   10.30.100.142 61.266 ms
   10.30.102.26 61.071 ms
7 10.30.102.26 61.139 ms 61.211 ms
   10.61.191.2 60.948 ms
HTH,
John
*** Please rate all useful posts ***

Nexus 7009 does not show the N7K-F248XP-25 modules ethernet ports n sh run

Hi everyone,
I have a question...
I going to install two Nexus 7009 with three N7K-F248XP-25 modules on each one, I am planning to create 3 VDC, but at the initial configuration the system does not show the Ethernet ports of these modules, even with the show inventory and show module I can see that the modules are recognized and its status is OK. There is something that I have to do before start to configure these modules...? enable some feature or license in order to see the ports with show running CLI...?

You can enable F1, F2, M1, M1XL and M2XL Series modules. There are no restrictions on the type of mix allowed for the system module-type command. The system module-type command allows a mix of F1, F2, M1, M1XL, and M2XL Series modules in the VDC.
Note The limit-resource module-type command controls the restrictions on the module-types that can be mixed in the VDC.
Note Use the system module-type f2 command to allow F2E Series modules into a VDC. The ports from F2 and F2E Series modules can be allocated like any other ports.
Note The modules that you do not enable must not be powered on after you configure this feature and enter yes. An error message will force you to manually disable these modules before proceeding. This prevents major disruption and service issues within a VDC.
The no form of this command resets the configuration mode to allow all modules.
hope this helps

Nexus 7000 with VPC and HSRP Configuration

Hi Guys,
I would like to know how to implement HSRP with the following setup:
There are 2 Nexus 7000 connected with VPC Peer link. Each of the Nexus 7000 has a FEX attached to it.
The server has two connections going to the FEX on each Nexus 7k (VPC). FEX's are not dual homed as far as I now they are not supported currently.
R(A)              R(S)
|                     |
7K Peer Link 7K
|                     |
FEX              FEX
Server connected to both FEX
The question is we have two routers connected to each of the Nexus 7k in HSRP (active and one is standby). How can I configure HSRP on the nexus switches and how the traffic will routed from the Standby Nexus switch to Active Nexus switch (I know HSRP works differently here as both of them can forward packets). Will the traffic go to the secondary switch and then via the peer link to the active switch and then to the active router ? (From what I read the packet from end hosts which will go via the peer link will get dropped)
Has anyone implemented this before ?
Thanks

Hi Kuldeep,
If you intend to put those routers on a non-vpc vlan, you may create a new inter-switch trunk between the N7K and allow that non-vpc vlan . However if those will be on a VPC vlan, best to create two links to the N7K pair and create a VPC, otherwise configure those ports as orphan ports which will leverage the VPC peer link .
HTH
Jay Ocampo

NX-OS firmware Upgradation in Nexus 5548 with Enhanced vPC with Dual Active FEX

Hi All,
Please tell me how to do "NX-OS firmware Upgradation in Nexus 5548 with Enhanced vPC with Dual Active FEX" without downtime for FEX.
The Server are connected to FEX.
Attached the diagram.

Hi,
If the 5500s are layer-2 with vPC running between them than you can use ISSU to upgade.
here is doc to follow:
ISSU Support for vPC Topologies
An ISSU is completely supported when two switches are paired in a vPC configuration. In a vPC configuration, one switch functions as a primary switch and the other functions as a secondary switch .They both run the complete switching control plane, but coordinate forwarding decisions to have optimal forwarding to devices at the other end of the vPC. Additionally, the two devices appear as a single device that supports EtherChannel (static and 802.3ad) and provide simultaneously data forwarding services to that device.
While upgrading devices in a vPC topology,you should start with the switch that is the primary switch. The vPC secondary device should be upgraded after the ISSU process completes successfully on the primary device. The two vPC devices continue their control plane communication during the entire ISSU process (except when the ISSU process resets the CPU of the switch being upgraded).
This example shows how to determine the vPC operational role of the switch:
link:
http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/upgrade/513_N1_1/n5k_upgrade_downgrade_513.html
HTH

Routing Issue with 2 Nics on Windows Server 2008 R2

Good Day
My issue is I needed to set up port forwarding for a web server to communicate with our hotels management server to check availability.
Initially the server has a single Nic configured in the 172.26.1.0 /24 network , Its default gateway the Switch vlan interface 172.26.1.1
We have many vlans for all the systems in the hotel and the server also needs to communicate with 3 other servers on different subnets which it does just fine.
I now added an additional adsl line with a managed router which has an interface of 192.168.10.1 /24 , My servers second NIC has the IP address 192.168.10.2 with its gateway being the 192.168.10.1
This 192.168.10.0 network is in a L2 Vlan and the rest of the network does not know it exists. It was working fine then just stopped asfter i added a static route to the server , which i did with RRas... I did this as the server could not communicate with
just one of the servers..
If i disable the 172.26.1.0 NIC the port forwarding works but then obviously the rest of the network goes down.. I know its a routing issue but am lost
please help

Hello,
using multiple default gateways is not a good idea.
See details in http://support.microsoft.com/kb/159168/en-us
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:

Routing Issue with Telia

I think verizon has a routing issue with Telia.

thought I would share this, Telia has admited an issue on their network
Twitter / Telia_service: @Ungvall routing problem? This ...
https://twitter.com/Telia_service/status/179661595276881921
Cached
Similar
Share
View shared post
BTW Apparently @Telia_service had routing problems on both the latest iOS and ... DNS problem and we are working with Akamai for a sollution to this problem

Routing Issue with 3550

I am having a routing issue with a 3550 switch. I have 5 vlans and I need one of the vlans to access a different router based on destination IP rather than our edge router. I have entered a static route on the 3550 that points to the secondary router whenever a certain network is tried to be accessed. My problem is I can't seem to get the traffic to flow correctly. When I trace route an address on the Internet the path shows as expected, the 3550 then my firewall then my edge router. When I trace an address that is on the other side of the secondary router I get the 3550 as the first hop, then nothing. I can ping the address so I know the path is up. What could be the issue? Thanks in advance.

Hello,
in addition to Mahmood´s post, what do you have defined as the next hop for the default route to the secondary router ? If you use an interface on the 3550 as the next hop, make sure that whatever is connected is in the same subnet, otherwise use the IP address of the next hop. So, let´s say your remote network is 192.168.1.0, and the secondary router is connected to FastEthernet0/1, your default route should look like this if the secondary router is in the same subnet (in this example, the IP address of the secondary router would be 172.16.1.2):
interface FastEthernet0/1
no switchport
ip address 172.16.1.1 255.255.255.252
ip route 192.168.1.0 0.0.0.255 FastEthernet0/0
Otherwise, try:
ip route 192.168.1.0 0.0.0.255 172.16.1.2
where 172.16.1.2 would be the address of the secondary router.
Does that make sense ?
Regards,
GNT

Audio tracks playing different audio tracks - routing issue?

I'm having trouble with some routing issues I believe. Here's the deal:
Some audio tracks are playing different audio tracks, when that region is not even in it. For instance:
Track #2 is Soloed. Output is Output 1-2. I hear the audio file that is in Track #1, which is NOT Soloed and I shouldn't even hear. I don't hear anything from Track #2. The only way I can hear Track #2 is by playing it from the audio bin, which obviously isn't going to work out right.
If I drag the audio region of Track #2 to a brand new audio track, I still don't hear anything. Is it possible this audio file(s) got corrupted somehow?
Please help!

Chris Joye wrote:
I'm having trouble with some routing issues I believe. Here's the deal:
Some audio tracks are playing different audio tracks, when that region is not even in it. For instance:
Track #2 is Soloed. Output is Output 1-2. I hear the audio file that is in Track #1, which is NOT Soloed and I shouldn't even hear. I don't hear anything from Track #2. The only way I can hear Track #2 is by playing it from the audio bin, which obviously isn't going to work out right.
If I drag the audio region of Track #2 to a brand new audio track, I still don't hear anything. Is it possible this audio file(s) got corrupted somehow?
Please help!
Check the parameters, in the left side of the arrange page window.
To me, it sounds as if you have a bunch of arrange tracks, which are all playing back through audio track #1.
Cheers

IB Routing issue. Unable to find routing to the corresponding incoming msg

Hi All,
We are facing a Routing issue. The flow of message across the DB is given below.
1) Message will be triggered from 3rd party application to PeopleSoft portal with Service Operation A
2) From portal one more service operation B will be invoked to communicate with CRM
Both the service operations are synchronous. I have tested the Service operation in CRM and I am able to get the results. But in Portal if I test, I am getting the error like
+"Unable to find routing corresponding to the incoming request message"+
I have checked the routing alias name between Portal and CRM data bases and Its same.
could you please give us a clue to debug this further?
Thanks,
Hari.A

You should check which permission list the service operation is attached to, and check if the user has been granted to, Something like the following from the backend :
SELECT   distinct c.roleuser
FROM     psclassdefn a, psroleclass b, psroleuser c
WHERE    a.classid = b.classid
AND      b.rolename = c.rolename
AND      a.classid = '<permission_list>' If nothing is returned for your user, then you could created a new role and give it to the user.
Also, since you are on Peopletools 8.52, all this configuration settings can be done through Integration Network WorkCenter. I wrote articles about that (and you can find something about permission list for a given service operation as well) :
http://gasparotto.blogspot.nl/2012/11/peopletools-852-integration-network.html
Nicolas.

NO HELP WITH ROUTING ISSUES FROM VERIZON

Spend 2 hours with technical support to no avail. Have routing issues where I can’t get from my FIOS residential account to remote web site abroad. Trace route fails at so-0-0-0.XT1.AMS2.ALTER.NET [146.188.14.209]. FIOS technical support is incapable of doing any troubleshooting beyond basic customer premises equipment, refusing to escalate the case to network engineering team. I was basically told by FIOS tech support supervisor {edited for privacy} that this is not Verizon’s problem and no help will be provided. What is even more frustrating that Verizon agents are not capable of receiving emails from customers with details such as trace route.
Is there anyone at Verizon monitoring this and able to help? Just in case, ticket number that I have with Verizon is {edited for privacy}
Here is trace route details.
tracert 212.44.136.226
Tracing route to brserv.bridgetour.ru [212.44.136.226]
over a maximum of 30 hops:
1     1 ms    <1 ms     1 ms Wireless_Broadband_Router.home [192.168.1.1]
2    12 ms     9 ms     9 ms L100.BSTNMA-VFTTP-71.verizon-gni.net [98.118.28
1]
3    16 ms    19 ms    19 ms G0-6-4-1.BSTNMA-LCR-21.verizon-gni.net [130.81.
75.132]
4    45 ms    15 ms     8 ms ae3-0.BOS-BB-RTR1.verizon-gni.net [130.81.151.6
5    19 ms    19 ms    19 ms 0.xe-3-2-0.IL1.NYC9.ALTER.NET [152.63.26.81]
6    21 ms    19 ms    19 ms 0.ge-1-2-0.IL1.NYC12.ALTER.NET [152.63.26.86]
7   107 ms   108 ms   107 ms so-0-0-0.XT1.AMS2.ALTER.NET [146.188.14.209]
8     *        *        *     Request timed out.
9     *        *        *     Request timed out.
10     *        *        *     Request timed out.
11     *        *        *     Request timed out.
12     *        *        *     Request timed out.
13     *        *        *     Request timed out.

BT help aren't always that helpful, but BT engineers claim that it is a BT sales issue and nothing to do with them seems a bit extreme.
Are you sure your daily speed is 8Mbits, not 8Mbytes? How are you measuring this? Is it the number coming from the BT speedtest?
If it really is 8Mb, then I think it's worth checking with the mods;  at: http://bt.custhelp.com/app/contact_email/c/4951 . But be aware they take 3 working days to reply: sometimes more if busy.

Verizon/Time Warner Routing Issue

I've been having trouble logging on to my email through Outlook, IPad, or IPhone. The service provider is Time Warner. Apparently the problem is a routing issue between Time Warner and Verizon and they've had the routing issues for over 2 months and have still not resolved the problem. Since no one at Verizon seems to know anything about this, does anyone have any information as to when the issue will be resolved?

I can sign in using webmail and see my email. But I can't use Outlook, my IPad or IPhone utilities to see my email using TW as a provider. If I'm anywhere else, using any other provider, I can use Outlook, my IPad and IPhone without any problems.
When I called TW, they told me the problem was a routing issue that both TW and Verizon were working on and had been working on for at least 2 months, but no solution yet. They were surprised that no one at Verizon knew this.
Since everything worked fine until a week ago and nothing changed in my settings and Verizon verified that everything was set up correctly, I'm satisfied that this is the issue. My concern is that not one Verizon representative has acknowledged that there is a routing problem between TW and Verizon; especially if the problem has existed well over 2 months. You would think that an issue like this should be shared among all their troubleshooting team.

Possible internet routing issues driving me crazy!

I've somehow hit a problem accessing a particular favourite website and it seems I may have a routing issue.
I've spoken with a friend who is fairly network savvy and he's suggested I raise a case \ complaint with BT. I thought I'd use this forum to test if I'm missing something I could be doing to fix it before logging a problem with BT Helpdesk!
I've a BT Homehub 2 (Current firmware   4.7.5.1.83.3.5 (Type B) and I can access pretty much all websites I care to look at without any issue at all, however the site I read most days is now no longer viewable on any of my 2 PC's nor my iPhone. When I try to access it I get no error messages at all just a blank white page.
Doesn't matter if I try using IE or Firefox or Chrome browers it's the same result - I just see a blank white page.
The site in question www.celticquicknews.co.uk (or www.celticquicknews.com) and is definitely available, as I can access it when using a site such as http://www.free-internet-organization.tk/ on both my PC's and iphone so I know the web site is up and running and available for browsing but since Thursday lunchtime I've had no joy in being to access that particular site directly wihout resorting to using another middleman site to let me view it.
I have tweeted the guy who hosts the www.celticquicknews.co.uk site and he's said his site is fine but has numerous similar queries around BTINTERNET folks having the same issue as I'm reporting.
I run McAfee Internet Security and having disabled the various firewall \secure browsing functions no improvement still no joy.
I did successfully somehow connect directy to the illusive web site this morning (Sunday 1st May) on my iphone at around 10am, but by the time I boiled the kettle to have a coffeee and sit and read the site it became inaccessable again on my iphone and both my PC's! So what's going on?
www.celticquicknews.co.uk [217.174.253.143]
www.celticquicknews.com [217.174.253.143]
Homehub TCP\IP info is as below which I suspect is of value to the more techincal on the forum:
Broadband network IP address   109.152.154.29
Default gateway   217.32.142.102
Primary DNS   194.72.0.114
Secondary DNS   62.6.40.162
ADSL line status
Connection Information
Line state   Connected
Connection time   0 days, 01:11:16
Downstream   15,978 Kbps
Upstream   1,144 Kbps
ADSL Settings
VPI/VCI   0/38
Type   PPPoA
Modulation   G.992.5 Annex A
Latency type   Interleaved
Noise margin (Down/Up)   5.2 dB / 6.0 dB
Line attenuation (Down/Up)   31.0 dB / 13.8 dB
Output power (Down/Up)   23.6 dBm / 1.7 dBm
C:\>tracert -d 217.174.253.143
Tracing route to 217.174.253.143 over a maximum of 30 hops
1    <1 ms    <1 ms    <1 ms 192.168.1.254
2    15 ms    15 ms    15 ms 217.32.142.102
3    18 ms    17 ms    16 ms 217.32.142.142
4    22 ms    22 ms    21 ms 213.120.163.26
5    22 ms    20 ms    21 ms 217.32.27.30
6    21 ms    21 ms    21 ms 217.32.27.178
7    22 ms    21 ms    21 ms 109.159.250.78
8    33 ms    35 ms    35 ms 109.159.250.13
9    28 ms    28 ms    29 ms 62.172.102.1
10    29 ms    28 ms    28 ms 195.66.224.98
11    33 ms    34 ms    33 ms 88.208.255.61
12    38 ms    32 ms    33 ms 88.208.255.102
13     *        *        *     Request timed out.
14     *        *        *     Request timed out.
15     *        *        *     Request timed out.
16     *        *        *     Request timed out.
17     *        *        *     Request timed out.
18     *        *        *     Request timed out.
19     *        *        *     Request timed out.
20     *        *        *     Request timed out.
21     *        *        *     Request timed out.
22     *        *        *     Request timed out.
23     *        *        *     Request timed out.
24     *        *        *     Request timed out.
25     *        *        *     Request timed out.
26     *        *        *     Request timed out.
27     *        *        *     Request timed out.
28     *        *        *     Request timed out.
29     *        *        *     Request timed out.
30     *        *        *     Request timed out.
Trace complete.
C:\>
I've reset my HH several times over the weekend and am baffled as to how I can somehow have 1 site excluded from my browsing options for no obvious reason other than a suspected internet routing issue.
My iPhone is on ORANGE and when disabling the wireless connection it too is unable to view the site in question so it's a real pain!
Not sure where to go to progress this so any help \ guidance is very much appreciated.......
Solved!
Go to Solution.

Appreciate the help....been out for most of the day and checked in to see if any additional posts.
I tried pinging the site and it does seem to resolve OK and also tried accessing site via IP but same issue - blank white page.
>ping www.celticquicknews.co.uk
Pinging www.celticquicknews.co.uk [217.174.253.143] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Then tried the telnet command "telnet 217.174.253.143 80" and I do not get any errors and as suggested the command prompt goes blank but no matter what I type I get no errors or response from server 217.174.253.143.
My IP address has changed from this morning and sadly still same issue for me.
Internet connection configuration
Connection Information
Connection time
0 days, 10:05:37
Data Transmitted/Received (MB)
10.8 / 29.4
Broadband username
[email protected]
Password
Not configured
TCP/IP settings
Broadband network IP address
86.147.168.198
Default gateway
217.32.142.102
Primary DNS
194.72.0.114
Secondary DNS
62.6.40.162
The tracert comments make sense so that's helped me understand, thanks for checking that out.
So what's the best option for me? Am I wasting BT and my own time logging a case?
I'd not usually bother pursuing this for the sake of a single web site but I'm bemused how this has happened since last week?
Thanks again for all help and guidance.
PJ

Will a 2 port LAG setup between 2 cisco 200-50s create routing issues?

I followed this guide. http://sbkb.cisco.com/CiscoSB/GetArticle.aspx?docid=caae365b755f46f5989177cb68216304_Link_Aggregation_on_Cisco_Series_Managed_Switches.xml&pid=2&converted=0 and linked ports 2 and 26 on both switches. Outside IT staff seems to think this will cause routing issues if multiple vlans are not involved.

Hello,
VLANs are not required for LAGs to function properly. Once you configure the LAG members you can configure the LAG as a trunk port with multiple VLANs, and access port with just one, or even a routed port with an IP address on it.
As long as both sides of the LAG are configured the same way there won't be an issue. Since these switches are Layer 2 only, they don't even do any kind of routing, so your outside IT may have meant a layer 2 loop, which will happen with multiple connections between the same switches. But when you configure them as a LAG is treats those links as the same connection, so there is no layer 2 loop either.
Hope that helps,
Christopher Ebert - Advanced Network Support Engineer
Cisco Small Business Support Center
*please rate helpful posts*

Routing issue in Nexus 7009 due to vPC or hsrp

Similar Messages

Maybe you are looking for