vWire deployment using Same Switch on Untrust and Trust Side

[Murph]

Hi Ladies and Gents,

I'm trying to support a Colocation solution where we use a single subnet from the Provider for WAN Support in a Switched Environment from the Provider and Customer Side, whereas Providers gives us two handoffs for the shared subnet.  The topology will have a Active/Passive Side Traffic Flow which would look like this:

Provider Edge (VLAN10)--> EdgeSwitch1 (VLAN10)--> PAvWire Untrust (VLAN10)-->PAvWire Trust (VLAN100)-->EdgeSwitch1(VLAN100)--> Subnet shared with any Edge Device such as VPN Terminator or Routing Appliance on VLAN 100.

Since deploying this we've had to use Etherchannels and MLAG on the Trust/Untrust side to avoid Routing Loops during HA Testing Scenario.  HA isn't consistent and I'm afraid it has something to do with how vWire is configured for Native VLAN Reassignment and that we have to use Etherchannel (Static) On for Port-channel as LACP isn't supported for vWire at Layer 2, so wer lost out on Negotiation.  We have this specifically setup for GeoBlocking, force traffic on VLAN 10 and then switch the native VLAN once it hits the EdgeSW1 interface with VLAN 100.  Has anyone done this or should we incorporate another switch since we are essentially hairpinning in and out the same swith for the same VLAN albeit different Native VLANs.