Monday, August 30, 2021

VXLAN - Nexus 9K - Anycast - VTEP Unresponsive?

I'm having some issues with a simple vxlan setup using static ingress replication.

The Anycast vPC pair's VTEP doesn't seem to be responsive at all. No encapsulated L2 traffic is being sent across the vxlan underlay if its being generated on the vPC pair side. I am able to see encapsulated L2 traffic being sent from the single 9K (10.51.8.50) towards to the pair. I see the packet coming in (an ARP request) but it doesn't appear to be decapsulated and forwarded to VLAN 500. When I generate L2 traffic on the vPC side it works fine locally but never appears to leave the VTEP.

I've dropped the MTU on the originating hosts to 1400 to get across my WAN link as its limited to 1500.

I have verified L3 connectivity:

ping 10.51.8.50 source-interface lo50

ping 10.243.13.50 source-interface lo50

I have verified the nve peer:

Interface Peer-IP State LearnType Uptime Router-Mac --------- -------------------------------------- ----- --------- -------- ----------------- nve1 10.51.8.50 Up DP 5d02h n/a

The vPC link appears good:

vPC domain id : 100

Peer status : peer adjacency formed ok

vPC keep-alive status : peer is alive

Configuration consistency status : success

Per-vlan consistency status : success

Type-2 consistency status : success

vPC role : primary

Number of vPCs configured : 50

Peer Gateway : Disabled

Dual-active excluded VLANs : 2

Graceful Consistency Check : Enabled

Auto-recovery status : Enabled, timer is off.(timeout = 240s)

Delay-restore status : Timer is off.(timeout = 30s)

Delay-restore SVI status : Timer is off.(timeout = 10s)

Operational Layer3 Peer-router : Disabled

Virtual-peerlink mode : Disabled

Config relating to vxlan:

1-SW1:

NXOS: version 9.3(1)

Cisco Nexus9000 C93180YC-FX Chassis

vlan 500

name VxLAN

vn-segment 5000

interface Vlan500

description vxlan-segment 5000 - 10.100.1.0/23

no shutdown

mtu 1500

ip address 10.100.1.250/23

interface nve1

no shutdown

source-interface loopback50

member vni 5000

ingress-replication protocol static

peer-ip 10.51.8.50

interface loopback50

description VxLAN - VN5000

ip address 10.241.13.51/32

ip address 10.241.13.50/32 secondary

1-SW2:

NXOS: version 9.3(1)

Cisco Nexus9000 C93180YC-FX Chassis

vlan 500

name VxLAN

vn-segment 5000

interface Vlan500

description vxlan-segment 5000 - 10.100.1.0/23

no shutdown

mtu 1500

ip address 10.100.1.251/23

interface nve1

no shutdown

source-interface loopback50

member vni 5000

ingress-replication protocol static

peer-ip 10.51.8.50

interface loopback50

description VxLAN - VN5000

ip address 10.241.13.52/32

ip address 10.241.13.50/32 secondary

2-SW1

NXOS: version 9.3(1)

Cisco Nexus9000 C93240YC-FX2 Chassis

vlan 500

name VxLAN

vn-segment 5000

interface Vlan500

description vxlan-segment 5000 - 10.100.1.0/23

no shutdown

mtu 1500

ip address 10.100.1.252/23

interface nve1

no shutdown

source-interface loopback50

member vni 5000

ingress-replication protocol static

peer-ip 10.241.13.50

interface loopback50

description VxLAN - VN5000

ip address 10.51.8.50/32

Any ideas why the vPC pairs VTEP seems to be dead?



No comments:

Post a Comment