vPC with VSX R77.30

**ba3113** · 2017-03-30

Hi Guys,

I am looking for your expert advise .
We are migrating our Checkpoint R77.10 on to R77.10 and also we are migrating 6500 Core Switch network on N9K .The N9K going to be configured with vPC.The firewalls vlans are going to be part of the vPC domain.The ClusterXL going to be set Multicast.
Do you see any challenge which can caused mac-address or interface flap issue if we vlans/ports are part of the vPC ?

**kubatrak** · 2017-03-31

I don't think you will get an issue, vPC support multicast. I've seen an issue with L3 multicast but not with L2 and it was in 5K's not in 9K's.
As a workaround (it's a botched job), you can connect another cable between Nexus boxes and use vlans with multicast going through that link and vPC vlans through the peer link.

**ba3113** · 2017-04-11

Hi Guys,

I have hit this issue if vlans are part of the vPC domain then both firewall not able to listen CCP packet and If I remove the vlan from vPC the firewall works OK.We dis not get chance to collect enough debug from switch so we had to set CCP mode to broadcast to make it working.
I guess I need to remove the vlan from vPC or add static multicast mac address on switch cam table ?
Has anyone come across with this situation ?
I am going to raise TAC case with CISCO.

**laf_c** · 2017-04-28

Originally Posted by ba3113

Hi Guys,

I have hit this issue if vlans are part of the vPC domain then both firewall not able to listen CCP packet and If I remove the vlan from vPC the firewall works OK.We dis not get chance to collect enough debug from switch so we had to set CCP mode to broadcast to make it working.
I guess I need to remove the vlan from vPC or add static multicast mac address on switch cam table ?
Has anyone come across with this situation ?
I am going to raise TAC case with CISCO.

What's the outcome here? And why would you aim for CCP on multicast, rather than broadcast?