我有这个场景并尝试配置vPCCisco ASA 5585(主动-备用)
Nexus vPC 配置:
interface port-channel1
switchport mode trunk
switchport trunk allowed vlan 10
speed 10000
mtu 9216
vpc 1
Nexus vPC 输出
# show vpc brief
Legend:
(*) - local vPC is down, forwarding via vPC peer-link
vPC domain id : 1
Peer status : peer adjacency formed ok
vPC keep-alive status : peer is alive
Configuration consistency status : success
Per-vlan consistency status : success
Type-2 consistency status : success
vPC role : primary
Number of vPCs configured : 3
Peer Gateway : Enabled
Dual-active excluded VLANs : -
Graceful Consistency Check : Enabled
Auto-recovery status : Enabled, timer is off.(timeout = 240s)
Delay-restore status : Timer is off.(timeout = 30s)
Delay-restore SVI status : Timer is off.(timeout = 10s)
vPC Peer-link status
---------------------------------------------------------------------
id Port Status Active vlans
-- ---- ------ --------------------------------------------------
1 Po999 up 10,100
vPC status
----------------------------------------------------------------------
id Port Status Consistency Reason Active vlans
-- ---- ------ ----------- ------ ------------
1 Po1 up success success 10
思科 ASA 配置:
# sh run int po1
!
interface Port-channel1
lacp max-bundle 8
no nameif
no security-level
no ip address
!
interface TenGigabitEthernet0/8
channel-group 1 mode active
no nameif
no security-level
no ip address
!
interface TenGigabitEthernet0/9
channel-group 1 mode active
no nameif
no security-level
no ip address
!
端口通道摘要
# show port-channel summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
U - in use N - not in use, no aggregation/nameif
M - not in use, no aggregation due to minimum links not met
w - waiting to be aggregated
Number of channel-groups in use: 1
Group Port-channel Protocol Span-cluster Ports
------+-------------+---------+------------+------------------------------------
1 Po1(N) LACP No Te0/8(P) Te0/9(P)
问题:
为什么端口通道显示
Po1(N)N - not in use, no aggregation/nameif?vPC 如何在 Active-Standby 模式下工作?
到目前为止,我还没有看到任何与 ASA 相关的 vPC 文档,那么这个解决方案是否有效,或者我是在浪费时间?
我在这里找到了链接但没有用:https://www.fir3net.com/Switches/Cisco/design-caveats-active-standby-network-devices-connected-via-vpc.html



