Connected networks do not match across cluster members for Cisco

Vendor

Cisco

Description

Indeni will identify when two devices are part of a cluster and alert if the networks they are directly connected to do not match.

Remediation Steps

Ensure all of the required ports are configured correctly on all cluster members, including the subnet mask.

1. Ensure all of the required interfaces are configured accordingly on all cluster members.

2. Consider to suspending this alert in case of orphan ports configured to one of the vPC peer switches.

How does this work?

This script logs into the Cisco Nexus switch using SSH and retrieves the output of the "show ip route direct" command. The output includes a table with the device's directly attached networks. The directly connected routes table has to match across vPC domain (cluster) memebers. If the tables are mismatched, an alert will be triggered.

Why is this important?

This script logs into the Cisco Nexus switch using SSH and retrieves the output of the "show ip route direct" command. The output includes a table with the device's directly attached networks. The directly connected routes table has to match across vPC domain (cluster) memebers. If the tables are mismatched, an alert will be triggered.

Without Indeni how would you find this?

It is possible to poll this data through SNMP but additional external logic would be required to correlate the connected routes table across vPC domain (cluster) members.


View Source Code