vPC Keepalive Link Failure: Impact on Convergence and Split-Brain Prevention
An engineer is troubleshooting connectivity between two Nexus 9000 switches configured with vPC. The vPC peer link is up, but the vPC peer-keepalive link is failing. Which action should be taken to ensure vPC convergence in the event of a peer-link failure?
Quick Answer
The correct answer is to ensure the peer-keepalive link uses a dedicated management interface or a separate VRF. This configuration is critical because when the vPC peer link fails, the keepalive link becomes the sole mechanism for the secondary switch to confirm the primary is still alive; without this isolation, a data-plane failure could also disrupt keepalive messages, causing the secondary to falsely assume the primary is dead and activate its own vPC member ports, leading to a split-brain scenario. On the Cisco DCCOR 350-601 exam, this question tests your understanding of vPC convergence and the distinct roles of the peer link versus the keepalive link—a common trap is confusing the two or assuming the keepalive link handles data traffic. Remember the memory tip: “Keepalive keeps the brain together; isolate it to avoid the split.”
⚠ Common exam trap
Cisco often tests the misconception that the peer-keepalive link is only for role negotiation during normal operation, when in fact it is critical for preventing split-brain during peer-link failures, and candidates may overlook the need for its isolation from the data plane.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ensure the peer-keepalive link uses a dedicated management interface or a separate VRF.
When the vPC peer link fails, the peer-keepalive link is used by the secondary switch to detect that the primary is still alive and to avoid becoming the primary (which would cause a split-brain scenario). Using a dedicated management interface or a separate VRF ensures the keepalive messages are isolated from the data plane and remain reachable even if the peer link goes down, allowing the secondary to correctly keep its vPC member ports in a suspended state and maintain convergence.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Ensure the peer-keepalive link uses a dedicated management interface or a separate VRF.
Why this is correct
A dedicated keepalive link ensures reliable communication and prevents split-brain.
- ✗
Disable vPC on both switches and reconfigure the port channels.
Why it's wrong here
Disabling vPC is not necessary; the issue is with keepalive.
- ✗
Reconfigure the vPC domain with a lower priority on the secondary switch.
Why it's wrong here
Priority affects role election, not keepalive failure behavior.
- ✗
Increase the vPC peer-keepalive hold timeout to 5 seconds.
Why it's wrong here
Increasing hold timeout delays failure detection.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-601 question from scratch — 984 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on 350-601
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A Nexus 9000 switch is configured with VPC. The VPC keepalive link fails. What is the effect on the VPC domain?
medium- A.Both switches suspend the VPC VLANs.
- B.Both switches continue to forward traffic normally.
- ✓ C.The secondary switch suspends its VPC member ports.
- D.The primary switch becomes orphan.
Why C: In a VPC domain, the keepalive link is used to monitor the liveness of the peer switch, but it does not carry data traffic. When the keepalive link fails, the secondary switch cannot confirm the primary is alive, so it suspends its VPC member ports to prevent a dual-active scenario. The primary switch remains active and continues forwarding traffic normally because it assumes the secondary has failed.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-601 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-601 exam.