The HSRP is configured on vPC. The active HSRP router is SD001. If the L3 uplink is down, the traffic towards will be blackholed.

Configure Track on vPC peers. Each SD has 2 separate L3 uplinks. Use 2 tracks to detect physical interface line protocol. Use a track list to include tracks. Apply track list under vPC domain.

  1. Shut down vPC domain if one of the links is down. Choose track list boolean and.
  2. Shut down vPC domain if both links are down. Choose track list boolean or.
track 1 interface Ethernet1/3 line-protocol track 2 interface Ethernet1/4 line-protocol track 10 list boolean or object 1 object 2 vpc domain 50 track 10

Normal track status.

SD002# show trac trace track SD002# show track Track 1 Interface Ethernet1/3 Line Protocol Line Protocol is UP 3 changes, last change 00:01:10 Tracked by: Track List 10 Track 2 Interface Ethernet1/4 Line Protocol Line Protocol is UP 1 changes, last change 00:05:27 Tracked by: Track List 10 Track 10 List Boolean or Boolean or is UP 2 changes, last change 00:01:45 Track List Members: object 2 UP object 1 UP Tracked by: vPCM Domain 50

Boolean or track status with 1 link down.

SD002(config-track)# show track Track 1 Interface Ethernet1/3 Line Protocol Line Protocol is DOWN 2 changes, last change 00:00:58 Tracked by: Track List 10 Track 2 Interface Ethernet1/4 Line Protocol Line Protocol is UP 1 changes, last change 00:03:59 Tracked by: Track List 10 Track 10 List Boolean or Boolean or is UP 2 changes, last change 00:00:16 Track List Members: object 2 UP object 1 DOWN

Boolean and track status with 1 link down.

SD002(config-if)# show track Track 1 Interface Ethernet1/3 Line Protocol Line Protocol is DOWN 2 changes, last change 00:00:05 Tracked by: Track List 10 Track 2 Interface Ethernet1/4 Line Protocol Line Protocol is UP 1 changes, last change 00:03:05 Tracked by: Track List 10 Track 10 List Boolean and Boolean and is DOWN 2 changes, last change 00:00:05 Track List Members: object 2 UP object 1 DOWN

Track status when both links are down.

SD002# show track Track 1 Interface Ethernet1/3 Line Protocol Line Protocol is DOWN 6 changes, last change 00:00:09 Tracked by: Track List 10 Track 2 Interface Ethernet1/4 Line Protocol Line Protocol is DOWN 4 changes, last change 00:00:09 Tracked by: Track List 10 Track 10 List Boolean or Boolean or is DOWN 5 changes, last change 00:00:09 Track List Members: object 2 DOWN object 1 DOWN Tracked by: vPCM Domain 50

VPC domain is shut down due to track 10 failure.

SD002# show vpc Legend: (*) – local vPC is down, forwarding via vPC peer-link vPC domain id : 50 Peer status : peer link is down vPC keep-alive status : peer is alive Configuration consistency status : success Per-vlan consistency status : success Type-2 consistency status : success vPC role : secondary Number of vPCs configured : 3 Track object : 10 Peer Gateway : Enabled Dual-active excluded VLANs : – Graceful Consistency Check : Enabled Auto-recovery status : Disabled Delay-restore status : Timer is off.(timeout = 150s) Delay-restore SVI status : Timer is off.(timeout = 10s) Delay-restore Orphan-port status : Timer is off.(timeout = 0s) Operational Layer3 Peer-router : Disabled Virtual-peerlink mode : Disabled vPC Peer-link status ——————————————————————— id Port Status Active vlans — —- —— ————————————————- 1 Po12 up – vPC status —————————————————————————- Id Port Status Consistency Reason Active vlans — ———— —— ———– —— ————— 10 Po10 down failed Peer-link is down – 30 Po30 down failed Peer-link is down – 200 Po200 down failed Peer-link is down –

When I unshut the uplink ports, the vPC port channels will be restored once the delay restore timer is up.

vpc domain 50 delay restore 150 track 10 SD002# show vpc Legend: (*) – local vPC is down, forwarding via vPC peer-link vPC domain id : 50 Peer status : peer adjacency formed ok vPC keep-alive status : peer is alive Configuration consistency status : success Per-vlan consistency status : success Type-2 consistency status : success vPC role : secondary Number of vPCs configured : 3 Track object : 10 Peer Gateway : Enabled Dual-active excluded VLANs : – Graceful Consistency Check : Enabled Auto-recovery status : Disabled Delay-restore status : Timer is on.(timeout = 150s, 11s left) Delay-restore SVI status : Timer is off.(timeout = 10s) Delay-restore Orphan-port status : Timer is off.(timeout = 0s) Operational Layer3 Peer-router : Disabled Virtual-peerlink mode : Disabled vPC Peer-link status ——————————————————————— id Port Status Active vlans — —- —— ————————————————- 1 Po12 up 1,10,20,30 vPC status —————————————————————————- Id Port Status Consistency Reason Active vlans — ———— —— ———– —— ————— 10 Po10 down* success success – 30 Po30 down* success success – 200 Po200 down* success success –

If the uplink is only 1 port channel, we can use only 1 track of port channel line protocol status and apply the single track under vPC domain.

Leave a Reply

Your email address will not be published. Required fields are marked *