Back to all posts
nexus cisco nxos vpc vxlan data center

Cisco NX-OS: From vPC to Back-to-Back vPC

1 min read (271 words)

The vPC Peer Link should never be blocking because this link carries important traffic such as the Cisco Fabric Services over Ethernet (CFSoE) Protocol. The peer link is always forwarding.

Topology diagram showing vPC peer link between Nexus switches

STP from SW8 and SW9:

STP output from switches SW8 and SW9 showing port states

STP from NXOS1 and NXOS2:

STP output from NXOS1 and NXOS2 switches showing port states

In the correct design, the vPC Peer Link should be used only in case of failure.

All links are up and active:

Network diagram showing all vPC links in active state

The link between SW8 and NXOS2 is down:

Network diagram showing vPC failover scenario with link down between SW8 and NXOS2

The link between SW9 and NXOS1 is down:

Network diagram showing vPC failover with link down between SW9 and NXOS1

Back-to-Back vPC

A back-to-back vPC is a way of connecting two pairs of Nexus switches with vPC. Both ends think they have a connection to a single switch. 

Topology diagram showing back-to-back vPC configuration
  • The same vPC number must be used on both vPC peers
  • vPC Peers models must matched (the same cards, models etc)
Detailed back-to-back vPC connection diagram between two Nexus pairs

As a result NXOS13 will have two interfaces with Root role: Po1 (Peer Link) and Po34 (link to another vPC peers). In this case a Data Plane loop prevention mechanism is in use: the frame comes in on the Peer Link is not allowed to go out a member port.

vPC peer-switch

With peer-switch each Nexus switch shares a virtual bridge ID which allows both switches to act as root for the VLAN. Each Nexus switch sends BPDUs with a root bridge identified by the virtual bridge ID. 

  • NXOS12 is connected to the NXOS10/11 switches via a vPC and will be in a forwarding status. NXOS12 receives Bridge Protocol Data Units (BPDUs) only from the primary switch in the vPC
  • Each NXOS10 and NXOS11 switch sends BPDUs with a root bridge identified by the virtual bridge ID.

Without peer-switch command:

STP topology diagram without peer-switch feature enabled

With peer-switch command configured.

STP topology diagram with peer-switch feature enabled
Dmitry Golovach
About

Dmitry Golovach

Principal Network Engineer and AI enthusiast. Always learning, always building.

Share this post

All posts