Hosts With An Hsrp Gateway Cannot Access Beyond Their Vlan - Cisco Nexus 9000 Series Troubleshooting Manual

Troubleshooting vPCs
Symptom
VLANs on a vPC are
moved to the suspend
state.
Hosts with an HSRP Gateway Cannot Access Beyond Their
VLAN
When HSRP is enabled on both vPC peer devices on a VLAN and hosts on that VLAN set the HSRP as their
gateway, they might not able to reach anything outside their own VLAN.
Symptom
Hosts with an HSRP
gateway cannot access
beyond their VLAN.

Hosts with an HSRP Gateway Cannot Access Beyond Their VLAN

Possible Cause
VLANs allowed on the vPC have not
been allowed on the vPC peer link.
Possible Cause
If the host gateway MAC address is
mapped to the physical MAC address
of any one of the vPC peer devices,
packets might get dropped due to the
loop prevention mechanism in the vPC.
Cisco Nexus 9000 Series NX-OS Troubleshooting Guide, Release 7.x
Solution
All VLANs allowed on a vPC must also
be allowed on the vPC peer link. Also, we
recommend that only vPC VLANs are
allowed on the vPC peer link.
Solution
Map the host gateway's MAC address to
the HSRP MAC address and not the
physical MAC address of any one of the
vPC peer devices. The peer gateway can
be a workaround for this scenario. Read
the configuration guide for more
information about the peer gateway
before you implement it.
49