Re: VPC with ASA in L3 mode

Vibeesh,

I do not believe L3 is the problem, the problem is routing protocols over
the vPC. For instance eigrp over a vPC will not work properly. However I
have setup MANY vPC's to for instance Fortinet Firewalls with not problems
well none that fortinet didn't have to write new code for, in fact Cisco
ASA's as well. If you try doing dynamic routing over the vPC you will
start pulling your hair out trying to troubleshoot why it's not working
properly.

If you are vPC'ng to a None Cisco device such as firewalls with
Active/Standby you want to disable lacp graceful convergence. After doing
hours and hours of failover testing with devices other than cisco that are
vPC'd to Nexus 5k and 7k's, Ive found that cisco's version of LACP doesn't
play well with other non-cisco devices if you do not disable graceful
convergence. Cisco by default uses graceful convergence and if you have
Active/Passive firewalls and or other devices that automatically failover
back to the original active device you will lose packets due to the Cisco
side of the LACP links gracefully bringing the links back after a failure.

On 4/13/13 9:44 PM, "Vibeesh S" <vibselva_at_gmail.com> wrote:

>Cisco does not recommend having a vpc setup to a L3 device.
>
>If I use SVI on the 7K and connect it to a ASA with VPC who is also having
>ether channel are there any issues that we foresee pop up ?
>appreciate your response
>
>--
>CCIE - R&S
>
>
>Blogs and organic groups at http://www.ccie.net
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sun Apr 14 2013 - 00:14:25 ART