Hello,
I have two N4032Fs running 6.2.0.5 with two MLAGs connecting to two partner switches. MLAG Po2 connects to partner A, MLAG Po4 connects to partner B. VLAN 2 is tagged on Po2 and Po4. VRRP is configured between the N4032Fs to route for VLAN 2. I also have a L3 connection with OSPF between the N4032Fs and partner B. I'm simulating migration of routes from partner B to the N4032Fs. Partner B will act as an access switch when the migration is complete.
Partner A has 3 hosts connected at 10.0.0.4, 10.0.0.5, and 10.0.0.6. These are pingable from the N4032Fs and partner A. Each host runs a web service on port 80/tcp.
On partner B and hosts connected to partner B I can ping to some of the hosts connected to partner A. Hosts connected to partner B and partner B are not on VLAN 2. I can traceroute to the same hosts I can ping. I can connect to the web service on all of the hosts. I can reliably ping and traceroute the VLAN addresses and the VRRP address from all hosts and switches.
OSPF on partner B is correctly showing the routes to each of the 4032Fs. The L3 links are single interface connections between each N4032F and partner B, not an MLAG. Should this be done with an MLAG?
If I disable the L3 link between one of the N4032Fs and disable the MLAG member on the same N4032F, I am able to communicate with all of the hosts connected to partner A from partner B and any hosts attached to partner B. This holds for either N4032F.
It seems to be an issue with packets moving across the VPC peer-link, which suggests to me a configuration problem. I've used version 1.3 of the MLAG deployment guide to configure the switches. That guide states six areas need to be in sync between the MLAG peers -- does this apply to non-MLAG interfaces on the peers, such as used for L3 connections to other switches?
Below is part of the sanitized configuration from the N4032Fs.
Thank you in advance for any advice you may have.
Tom
4032-1:
interface vlan 2
ip address 10.0.0.2 255.255.255.128
ip helper-address 10.100.100.100
vrrp 1
vrrp 1 mode
vrrp 1 ip 10.0.0.1
vrrp 1 accept-mode
vrrp 1 authentication simple "sekret"
exit
interface port-channel 1
spanning-tree disable
switchport mode trunk
vpc peer-link
interface port-channel 2
switchport mode trunk
switchport trunk native vlan 999
switchport trunk allowed vlan 2
vpc 2
interface port-channel 4
switchport mode trunk
switchport trunk native vlan 999
switchport trunk allowed 2
vpc 4
4032-2:
interface vlan 2
ip address 10.0.0.3 255.255.255.128
ip helper-address 10.100.100.100
vrrp 1
vrrp 1 mode
vrrp 1 ip 10.0.0.1
vrrp 1 accept-mode
vrrp 1 authentication simple "sekret"
exit
interface port-channel 1
spanning-tree disable
switchport mode trunk
vpc peer-link
interface port-channel 2
switchport mode trunk
switchport trunk native vlan 999
switchport trunk allowed vlan 2
vpc 2
interface port-channel 4
switchport mode trunk
switchport trunk native vlan 999
switchport trunk allowed 2
vpc 4