Refer to the exhibit. The ASA 1 acts as a Layer 3 gateway for all servers. The servers lose the gateway connectivity when the vPC peer links go down and the vPC keepalive remains up. Which action…

Question

Exhibit

Options

• ACreate a static port channel with two links from each firewall to the switch
• BActivate the vPC orphan-port suspend feature on the switch ports connected to the firewall
• CImplement the IP reoVect feature on the vPC devices
• DEnable the vPC peer gateway feature on the vPC devices

• A
  6% (1)
• B
  78% (14)
• C
  6% (1)
• D
  11% (2)

Explanation

When the vPC peer link goes down but the keepalive link remains up, the secondary vPC switch suspends all its vPC member ports to avoid a split-brain scenario. However, 'orphan ports' - ports that are not part of a vPC bundle (like single-connected firewall interfaces) - remain active on the secondary switch even though it has lost peer connectivity. This causes the servers behind those orphan ports to lose their Layer 3 gateway. Enabling the vpc orphan-port suspend feature on the switch ports connected to the ASA (firewall) ensures those orphan ports are also suspended when the peer link fails, forcing traffic to flow exclusively through the primary switch and maintaining consistent gateway reachability.

No community discussion yet for this question.