Cisco配置问题

Question

我有这样的场景，并试图为Cisco ASA 5585 (活动备用)配置vPC。

Nexus vPC配置：

interface port-channel1
  switchport mode trunk
  switchport trunk allowed vlan 10
  speed 10000
  mtu 9216
  vpc 1

Nexus vPC输出

# show vpc brief
Legend:
                (*) - local vPC is down, forwarding via vPC peer-link

vPC domain id                     : 1
Peer status                       : peer adjacency formed ok
vPC keep-alive status             : peer is alive
Configuration consistency status  : success
Per-vlan consistency status       : success
Type-2 consistency status         : success
vPC role                          : primary
Number of vPCs configured         : 3
Peer Gateway                      : Enabled
Dual-active excluded VLANs        : -
Graceful Consistency Check        : Enabled
Auto-recovery status              : Enabled, timer is off.(timeout = 240s)
Delay-restore status              : Timer is off.(timeout = 30s)
Delay-restore SVI status          : Timer is off.(timeout = 10s)

vPC Peer-link status
---------------------------------------------------------------------
id   Port   Status Active vlans
--   ----   ------ --------------------------------------------------
1    Po999  up     10,100

vPC status
----------------------------------------------------------------------
id   Port   Status Consistency Reason                     Active vlans
--   ----   ------ ----------- ------                     ------------
1    Po1    up     success     success                    10

Cisco ASA配置：

# sh run int po1
!
interface Port-channel1
 lacp max-bundle 8
 no nameif
 no security-level
 no ip address
!
interface TenGigabitEthernet0/8
 channel-group 1 mode active
 no nameif
 no security-level
 no ip address
!
interface TenGigabitEthernet0/9
 channel-group 1 mode active
 no nameif
 no security-level
 no ip address
!

端口-通道摘要

# show port-channel summary
Flags:  D - down        P - bundled in port-channel
        I - stand-alone s - suspended
        H - Hot-standby (LACP only)
        U - in use      N - not in use, no aggregation/nameif
        M - not in use, no aggregation due to minimum links not met
        w - waiting to be aggregated
Number of channel-groups in use: 1
Group  Port-channel  Protocol  Span-cluster  Ports
------+-------------+---------+------------+------------------------------------
1      Po1(N)            LACP          No     Te0/8(P)   Te0/9(P)

问题：

• 为什么端口通道显示Po1(N) N - not in use, no aggregation/nameif？
• vPC是如何在主存模式下工作的？
• 到目前为止，我还没有看到任何与ASA相关的文档，所以这个解决方案会起作用吗?还是我在浪费时间？

我在这里找到了链接，但没有用：https://www.fir3net.com/Switches/Cisco/design-caveats-active-standby-network-devices-connected-via-vpc.html

Answer 1

只要您正确地配置它们，这应该是有效的。

下面的捕获来自CiscoNexus7000系列交换机上vPC的最佳实践

Answer 2

萨蒂什

我们有类似的设置与两个Nexus7K开关，我们不使用VPC，我们使用HSRP在第二层交叉连接我们的Nexus交换机。从那里，我们交叉连接我们的分配和访问交换机使用中继端口的容错。

如果一个ASA正在备份另一个ASA，您应该研究在ASA中创建HA选项。您的ASA将以主动和备用模式相互连接，您可能需要在ASA上使用此功能的许可证。