Cisco Nexus 9000 Series - Hosts with an HSRP Gateway Cannot Access Beyond Their VLAN

SolutionPossible CauseSymptom
All VLANs allowed on a vPC must also
be allowed on the vPC peer link. Also, we
recommend that only vPC VLANs are
allowed on the vPC peer link.
VLANs allowed on the vPC have not
been allowed on the vPC peer link.
VLANs on a vPC are
moved to the suspend
state.
Hosts with an HSRP Gateway Cannot Access Beyond Their
VLAN
When HSRP is enabled on both vPC peer devices on a VLAN and hosts on that VLAN set the HSRP as their
gateway, they might not able to reach anything outside their own VLAN.
SolutionPossible CauseSymptom
Map the host gateway's MAC address to
the HSRP MAC address and not the
physical MAC address of any one of the
vPC peer devices. The peer gateway can
be a workaround for this scenario. Read
the configuration guide for more
information about the peer gateway
before you implement it.
If the host gateway MAC address is
mapped to the physical MAC address
of any one of the vPC peer devices,
packets might get dropped due to the
loop prevention mechanism in the vPC.
Hosts with an HSRP
gateway cannot access
beyond their VLAN.
Cisco Nexus 9000 Series NX-OS Troubleshooting Guide, Release 7.x
49
Troubleshooting vPCs
Hosts with an HSRP Gateway Cannot Access Beyond Their VLAN