nx.os.and.cisco.nexus.switching.2nd.edition.1587143046

Recommendations

Info

Example 5-53 shows how to change the ACL sequence numbers assigned to rules in a MAC ACL. Resequencing is useful when you need to insert rules into an ACL. The first rule receives the number specified, and each subsequent rule receives a number larger than the preceding rule. The difference in numbers is determined by the increment number that you specify. Example 5-53. Changing the ACL Sequence Numbers Assigned to Rules in a MAC ACL Click here to view code image Egypt(config)# resequence mac access-list mac-acl 200 10 Egypt(config)# exit Egypt# show mac access-lists mac-acl MAC access list mac-acl statistics per-entry 200 permit 0050.561f.73d3 0050.56bc.48dd any 210 permit 0050.561f.73d3 0000.00ff.ffff any Egypt# Configuring VLAN ACLs A VLAN ACL (VACL) is an application of a MAC ACL or IP ACL. You can configure VACLs to apply to all packets routed into or out of a VLAN or bridged within a VLAN. VACLs are deployed for security packet filtering and redirecting traffic to specific physical interfaces. Note VACLs are not defined by direction (ingress or egress). Example 5-54 shows how to configure a VACL to forward traffic permitted by a MAC ACL named acl-mac-map. Example 5-54. Creating a VACL or Adding a VACL Entry Click here to view code image Egypt# conf t Enter configuration commands, one per line. End with CNTL/Z. Egypt(config)# vlan access-map acl-mac-map Egypt(config-access-map)# match mac address mac-acl Egypt(config-access-map)# action forward
Egypt(config-access-map)# statistics per-entry Egypt(config-access-map)# exit Egypt(config)# exit Egypt# show runn aclmgr !Command: show running-config aclmgr !Time: Thu Oct 1 17:19:24 2009 version 5.2(3a) mac access-list mac-acl statistics per-entry 200 permit 0050.561f.73d3 0050.56bc.48dd any 210 permit 0050.561f.73d3 0000.00ff.ffff any vlan access-map acl-mac-map 10 match mac address mac-acl action forward statistics per-entry Egypt# Example 5-55 shows how to apply the VACL to the VLAN list. Example 5-55. Applying the VACL to the VLAN List Click here to view code image Egypt(config)# vlan filter acl-mac-map vlan-list 10 Egypt(config)# show running-config aclmgr !Command: show running-config aclmgr !Time: Thu Oct 1 17:24:17 2009 version 5.2(3a) mac access-list mac-acl statistics per-entry 200 permit 0050.561f.73d3 0050.56bc.48dd any 210 permit 0050.561f.73d3 0000.00ff.ffff any vlan access-map acl-mac-map 10 match mac address mac-acl action forward statistics per-entry vlan filter acl-mac-map vlan-list 10 Egypt(config)# Configuring Port Security
Page 2 and 3:
NX-OS and Cisco Nexus Switching Nex
Page 4 and 5:
For sales outside of the U.S. pleas
Page 6 and 7:
About the Authors Ron Fuller, CCIE
Page 8 and 9:
Dedications Ron Fuller: This book i
Page 10 and 11:
We need to find another heavy conce
Page 12 and 13:
Contents at a Glance Foreword Intro
Page 14 and 15:
Interface Allocation: N7K-M108X2-12
Page 16 and 17:
OSPF OSPFv2 Configuration OSPF Summ
Page 18 and 19:
Cisco TrustSec Configuring AAA for
Page 20 and 21:
Chapter 8 Unified Fabric Unified Fa
Page 22 and 23:
OTV Control Plane Multicast-Enabled
Page 24 and 25:
Icons Used in This Book
Page 26 and 27:
Foreword With more than 30,000 cust
Page 28 and 29:
Chapters 1 through 14 cover the fol
Page 30 and 31:
• Security: Cisco NX-OS provides
Page 32 and 33:
Fibre Channel, Ethernet, and FCoE i
Page 34 and 35:
• Nexus 2224: FEX, 24 100/1000Bas
Page 36 and 37:
Nexus 3000 Learned Routes), EIGRP-S
Page 38 and 39:
• NX-OS supports VDCs, which enab
Page 40 and 41:
Click here to view code image Congo
Page 42 and 43:
NX-OS has many different types of m
Page 44 and 45:
module to which it is attached, ena
Page 46 and 47:
Example 1-6. Enabling a Telnet Serv
Page 48 and 49:
user:admin this user account has no
Page 50 and 51:
SNMP Figure 1-4. Results of the Sel
Page 52 and 53:
___________________________________
Page 54 and 55:
User Auth Priv ____ ____ ____ NMS s
Page 56 and 57:
Managing System Files Directories c
Page 58 and 59:
309 Mar 21 15:43:51 2011 dc1-fp.lic
Page 60 and 61:
active/ bootflash://sup-remote/ boo
Page 62 and 63:
will be applied to your current run
Page 64 and 65:
N7010-1(config)# snmp-server enable
Page 66 and 67:
vrf 2 1000 3 0 portchannel 0 768 1
Page 68 and 69:
• Independent processes started f
Page 70 and 71:
Figure 1-6. Shared Interface Concep
Page 72 and 73:
Example 1-14. Creating a VDC Core o
Page 74 and 75:
Figure 1-13. Nexus 7000 F2e 48-Port
Page 76 and 77:
• After a port has been assigned
Page 78 and 79:
Figure 1-20. N7K-M148GS-11 and L Mo
Page 80 and 81:
Figure 1-22. N7K-M224XP-23L I/O Mod
Page 82 and 83:
Interface Allocation on M2 Modules
Page 84 and 85:
egypt(config)# vdc core egypt(confi
Page 86 and 87:
Further Reading Figure 1-25. Physic
Page 88 and 89:
Chapter 2. Layer 2 Support and Conf
Page 90 and 91:
connectivity. One of the most appar
Page 92 and 93:
1GE JAF1318AALS NX5000# show fex 10
Page 94 and 95:
- down 1 full 1000 -- Eth100/1/9 -
Page 96 and 97:
Eth100/1/11 Eth100/1/3 Eth100/1/2 E
Page 98 and 99:
Eth100/1/2 Up Po100 Po100 Eth100/1/
Page 100 and 101:
N7K-1(config)# mac address-table ag
Page 102 and 103:
Congo# show vlan internal usage VLA
Page 104 and 105:
the requirements of the devices con
Page 106 and 107:
14 VLAN0014 active Eth2/11, Eth2/12
Page 108 and 109:
• Host6(192.168.100.26): Sends tr
Page 110 and 111:
Kenya(config-if)# switchport mode p
Page 112 and 113:
used to provide a much simpler conf
Page 114 and 115:
Congo# conf t Enter configuration c
Page 116 and 117:
Eth2/11 Root FWD 4 128.267 Network
Page 118 and 119:
Example 2-29 demonstrates how the d
Page 120 and 121:
Example 2-31. MST Verification Clic
Page 122 and 123:
Click here to view code image Egypt
Page 124 and 125:
Example 2-38 shows the root ports o
Page 126 and 127:
- ---------------- VLAN0001 4097 00
Page 128 and 129:
001b.54c2.bbc2 4 2 12 9 Ethernet2/1
Page 130 and 131:
intervention to enable ports that h
Page 132 and 133:
Congo# Example 2-51 shows how to re
Page 134 and 135:
After the VLAN is defined on Egypt,
Page 136 and 137:
Configuring Layer 2 Interfaces Now
Page 138 and 139:
!Time: Fri Oct 30 08:52:29 2009 ver
Page 140 and 141:
aggregation protocol information is
Page 142 and 143:
Members must have same Ethernet Lay
Page 144 and 145:
---------------------- Po100 on on
Page 146 and 147:
oth devices are online, and also to
Page 148 and 149:
Congo(config-if)# no shutdown Congo
Page 150 and 151:
link. This will enable spanning tre
Page 152 and 153:
00- 103 00-103 Allowed VLANs - 40-4
Page 154 and 155:
spanning tree domain to the entire
Page 156 and 157:
Current operational state: advertis
Page 158 and 159:
FabricPath IS-IS adjacencies are th
Page 160 and 161:
Figure 2-9. FabricPath Topology As
Page 162 and 163:
Figure 2-10. FabricPath Interface C
Page 164 and 165:
D - Static Adjacencies attached to
Page 166 and 167:
• Enable the vPC feature. • Def
Page 168 and 169:
Performed vPC role : none establish
Page 170 and 171:
Figure 2-12. vPC+ Interface Configu
Page 172 and 173:
VLAN MAC Address Type age Secure NT
Page 174 and 175:
called the Diffusing Update Algorit
Page 176 and 177:
Example 3-4 shows an alphanumeric s
Page 178 and 179:
Interface Peers Un/Reliable SRTT Un
Page 180 and 181:
Note Mixing standard and wide metri
Page 182 and 183:
Example 3-14. Summarizing Networks
Page 184 and 185:
GigabitEthernet1/48 10.0.0.0/24 is
Page 186 and 187:
Congo# show ip eigrp neighbor detai
Page 188 and 189:
complex routing scenarios with a fi
Page 190 and 191:
edistributed. Example 3-24. Definin
Page 192 and 193:
D 10.10.10.0 [90/3072] via 192.168.
Page 194 and 195:
total) With the output in Example 3
Page 196 and 197:
Figure 3-5. Network Topology for OS
Page 198 and 199:
Congo# config t Enter configuration
Page 200 and 201:
Libya# show ip ospf neighbor detail
Page 202 and 203:
CNTL/Z. Congo(config)# router ospf
Page 204 and 205:
*via 192.168.1.1, Lo0, [0/0], 01:02
Page 206 and 207:
as Type 7 LSAs. Although not common
Page 208 and 209:
Number of LSAs: 6, checksum sum 0x3
Page 210 and 211:
Securing OSPF Area ranges are 192.1
Page 212 and 213:
Example 3-55. Verification of OSPF
Page 214 and 215:
Congo(config-route-map)# match ip a
Page 216 and 217:
default-metric 100 The process begi
Page 218 and 219:
D - EIGRP, EX - EIGRP external, O -
Page 220 and 221:
Example 3-67. This information is e
Page 222 and 223:
extremely valuable when troubleshoo
Page 224 and 225:
1. Enable IS-IS. 2. Configure the I
Page 226 and 227:
Level-1 Designated IS: Congo Level-
Page 228 and 229:
Congo(config-if)# sh isis adj IS-IS
Page 230 and 231:
Figure 3-10. Network Topology for B
Page 232 and 233:
feature bgp router bgp 65000.65088
Page 234 and 235:
BGP version 4, remote router ID 192
Page 236 and 237:
Received 4 messages, 0 notification
Page 238 and 239:
Neighbor capabilities: Dynamic capa
Page 240 and 241:
queue Sent 6689 messages, 1 notific
Page 242 and 243:
S 172.26.2.0/23 [1/0] via 172.26.32
Page 244 and 245:
o - ODR, P - periodic downloaded st
Page 246 and 247:
*>r192.168.1.40/30 0.0.0.0 44 2500
Page 248 and 249:
version 4.2(2a) feature hsrp Simila
Page 250 and 251:
Virtual IP address is 10.10.100.1 (
Page 252 and 253:
Vlan100 - Group 100 (HSRP-V1) (IPv4
Page 254 and 255:
VRRP 2 state changes, last state ch
Page 256 and 257:
implementation in IOS, a device wit
Page 258 and 259:
You can see the addition of authent
Page 260 and 261:
Figure 3-13. HSRP/VRRP Interaction
Page 262 and 263:
Figure 3-15 illustrates the topolog
Page 264 and 265:
Verifying GLBP Configuration A quic
Page 266 and 267:
Active is local Standby is 10.10.10
Page 268 and 269:
emaining) Active is local, weightin
Page 270 and 271:
Chapter 4. IP Multicast Configurati
Page 272 and 273:
eferred to as the RP tree or RPT. F
Page 274 and 275:
In general, PIM can operate in two
Page 276 and 277:
Due to this behavior, it is not nec
Page 278 and 279:
N7K-1-Core1# config Enter configura
Page 280 and 281:
priority: 0, RP-source: (local), gr
Page 282 and 283:
Auto-RP Announce policy: None Auto-
Page 284 and 285:
N7K-2-Core# config Enter configurat
Page 286 and 287:
Auto-RP RPA: 10.1.0.1, uptime: 00:0
Page 288 and 289:
BSR RP Candidate policy: None BSR R
Page 290 and 291:
PIM Group-Range Configuration for V
Page 292 and 293:
The Nexus 7000 is a Layer 3 switch
Page 294 and 295:
Vlan100, Interface status: protocol
Page 296 and 297:
Switch-querier disabled IGMPv3 Expl
Page 298 and 299:
CMHLAB-DC2-VSM1# show ip igmp snoop
Page 300 and 301:
Figure 4-9. Network Topology for MS
Page 302 and 303:
238.102.1.1/32 238.101.1.1/32 238.1
Page 304 and 305:
PIM configured DR priority: 1 PIM b
Page 306 and 307:
Chapter 5. Security This chapter co
Page 308 and 309:
share. This model provides security
Page 310 and 311: distribution, use the following com
Page 312 and 313: deadtime value:0 source interface:l
Page 314 and 315: or Offline Click here to view code
Page 316 and 317: Figure 5-3. Adding a User to the Ci
Page 318 and 319: Click here to view code image Egypt
Page 320 and 321: pending pending-diff Egypt(config)#
Page 322 and 323: Example 5-16. Verifying TACACS+ CFS
Page 324 and 325: configuration required in NX-OS. Ex
Page 326 and 327: Figure 5-7. Adding Redundant NX-OS
Page 328 and 329: Note • Be sure to have an SSH Ser
Page 330 and 331: Tx 7653 output packets 6642 unicast
Page 332 and 333: Figure 5-9. Cisco TrustSec Example
Page 334 and 335: NX7k-SGA # conf t NX7k-SGA (config)
Page 336 and 337: Figure 5-12. The Required Fields to
Page 338 and 339: Click here to view code image NX7K-
Page 340 and 341: Example 5-32 shows the successful d
Page 342 and 343: • PCI 3 (decimal) / 0003 (hex)
Page 344 and 345: Figure 5-20. The ISE Compares Its S
Page 346 and 347: NX7K-SGA(config)# cts refresh role-
Page 348 and 349: Egypt# show run cts feature dot1x f
Page 350 and 351: Egypt# show runn cts !Command: show
Page 352 and 353: Example 5-42 confirms the VLAN used
Page 354 and 355: Total Length: 84 Identification: 0x
Page 356 and 357: To improve the scalability of ACL m
Page 358 and 359: 0001 ip access-list TCP1 0002 permi
Page 362 and 363: Port security enables you to config
Page 364 and 365: Click here to view code image Egypt
Page 366 and 367: A maximum number of MAC addresses c
Page 368 and 369: Note Enable DHCP snooping globally
Page 370 and 371: Egypt# Example 5-67 shows how to ve
Page 372 and 373: Note By default, all interfaces are
Page 374 and 375: Vlan : 1 ----------- Configuration
Page 376 and 377: !Command: show running-config dhcp
Page 378 and 379: network performance. The traffic st
Page 380 and 381: Egypt(config-if)# Example 5-84 veri
Page 382 and 383: Unicast packets : 0/0/0/0/0 Unicast
Page 384 and 385: permit eigrp any any ipv6 access-li
Page 386 and 387: permit pim any ff02::d/128 permit u
Page 388 and 389: match access-group name copp-system
Page 390 and 391: class copp-system-p-class-critical
Page 392 and 393: | glean | mtu | multicast {directly
Page 394 and 395: Example 5-90. Configuring Rate Limi
Page 396 and 397: copy Config : 30000 Allowed : 26346
Page 398 and 399: User ____ Auth Priv ____ ____ Examp
Page 400 and 401: Role: vdc-operator Description: Pre
Page 402 and 403: -----------------------------------
Page 404 and 405: entity : entity_power_status_change
Page 406 and 407: entity : entity_power_status_change
Page 408 and 409: Chapter 6. High Availability This c
Page 410 and 411:
edundant Configure power supply red
Page 412 and 413:
• Cisco Nexus 7010 Series system
Page 414 and 415:
2 QEng1Sn3(s20) 115 105 46 2 QEng1S
Page 416 and 417:
not be prolonged because of the ina
Page 418 and 419:
--- -------------- ------ 1 NA 1.0
Page 420 and 421:
Example 6-7. Supervisor Runtime Dia
Page 422 and 423:
Congo# show diagnostic description
Page 424 and 425:
L/* - Exclusively run this test / N
Page 426 and 427:
***N******A 00:30:00 9) SecondaryBo
Page 428 and 429:
These software features combine to
Page 430 and 431:
N7k-1(config)# install feature-set
Page 432 and 433:
Other supervisor (sup-5) ----------
Page 434 and 435:
! The impact of the software upgrad
Page 436 and 437:
5 bios v3.22.0(02/20/10): v3.22.0(0
Page 438 and 439:
Kernel uptime is 128 day(s), 7 hour
Page 440 and 441:
1 yes non-disruptive rolling 2 yes
Page 442 and 443:
ios/loader/bootrom. Warning: please
Page 444 and 445:
http://www.opensource.org/licenses/
Page 446 and 447:
In addition to the NX-OS operating
Page 448 and 449:
features such as stateful process r
Page 450 and 451:
it to the destination. SPANning tra
Page 452 and 453:
Jealousy(config-if)# switchport mon
Page 454 and 455:
Example 7-5. Displaying a Monitor S
Page 456 and 457:
Example 7-7. Displaying a Virtual S
Page 458 and 459:
Figure 7-3. Nexus 5x00 SPAN Topolog
Page 460 and 461:
Click here to view code image CMHLA
Page 462 and 463:
state : up source intf : rx : vfc10
Page 464 and 465:
Note The Nexus 1000V does not suppo
Page 466 and 467:
CMHLAB-DC2-VSM1# config t CMHLAB-DC
Page 468 and 469:
Figure 7-6. Create a vmk Port Using
Page 470 and 471:
Figure 7-8. Create a vmk Port Using
Page 472 and 473:
CMHLAB-DC2-VSM1(config-erspan-src)#
Page 474 and 475:
N7K-2(config-erspan-src)# no shut N
Page 476 and 477:
Legend: l = learning enabled f = fo
Page 478 and 479:
Legend: l = learning enabled f = fo
Page 480 and 481:
Note The Nexus 5500 series switches
Page 482 and 483:
cmhlab-dc2-tor2(config-erspan-src)#
Page 484 and 485:
802.1Q Virtual LAN 000. .... .... .
Page 486 and 487:
.... 10.. = Port Role: Root (2) ...
Page 488 and 489:
Frame Length: 57 bytes Capture Leng
Page 490 and 491:
...0 .... .... .... = CFI: 0 .... 0
Page 492 and 493:
..1. .... = Forwarding: Yes ...1 ..
Page 497 and 498:
Note You can add more show commands
Page 499 and 500:
Data Center Jealousy(config-callhom
Page 501 and 502:
neighbor If the email transport opt
Page 503 and 504:
Example 7-35. System-Generated Chec
Page 505 and 506:
After a review of the differences,
Page 507 and 508:
Checkpoints can be given a name and
Page 509 and 510:
Rollback Patch is Empty Note: Apply
Page 511 and 512:
Jealousy(config-flow-record)# end J
Page 513 and 514:
Layer 2 NetFlow cannot be applied i
Page 515 and 516:
packets CMHLAB-DC2-VSM1(config-flow
Page 517 and 518:
where NTP runs in multiple VDCs, th
Page 519 and 520:
Local clock time:Sun May 6 03:21:16
Page 521 and 522:
2. A DHCP request is sent and repli
Page 523 and 524:
if protocol == "telnet": c = "/isan
Page 525 and 526:
scLogFileName + ".*100%", \ pexpect
Page 527 and 528:
print "Failed connecting to " + hos
Page 529 and 530:
• Higher availability: Quite simp
Page 531 and 532:
eaping the benefits of a Unified I/
Page 533 and 534:
Figure 8-4. FIP Process FIP can be
Page 535 and 536:
Multhop Fibre Channel over Ethernet
Page 537 and 538:
to Cisco NX-OS,” and the focus in
Page 539 and 540:
switch as a Fabric Port (F-port) an
Page 541 and 542:
-----------------------------------
Page 543 and 544:
Restarting system. Single-Hop FCoE
Page 545 and 546:
1 minute output rate 0 bits/sec, 0
Page 547 and 548:
Port Native Status Port Vlan Channe
Page 549 and 550:
Click here to view code image N5K-1
Page 551 and 552:
N5K-1# A similar configuration must
Page 553 and 554:
N7K-1# config Enter configuration c
Page 555 and 556:
Click here to view code image N7K-1
Page 557 and 558:
2000 2000 Operational N7K-1-FCoE# N
Page 559 and 560:
version 5.2(2a) interface Ethernet3
Page 561 and 562:
Note If all the shared ASIC ports a
Page 563 and 564:
Figure 8-14. FCoE Topology Example
Page 565 and 566:
could fail. By taking advantage of
Page 567 and 568:
VSM in an active-standby pair; and
Page 569 and 570:
Figure 9-2. Nexus 1000V Topology Th
Page 571 and 572:
The VEM differentiates between the
Page 573 and 574:
Figure 9-3. VEM Loop Prevention Not
Page 575 and 576:
login as: admin Nexus 1010 Using ke
Page 577 and 578:
VsbEthernet1/1 control 0 up up VsbE
Page 579 and 580:
vsm login: admin Password: Cisco Ne
Page 581 and 582:
Click here to view code image vsm#
Page 583 and 584:
Figure 9-6. Selecting the Plug-Ins
Page 585 and 586:
Figure 9-9. Registering the Plug-In
Page 587 and 588:
such license is available at http:/
Page 589 and 590:
sync status: Complete version: VMwa
Page 591 and 592:
Figure 9-14. Entering the VMWare vC
Page 593 and 594:
Figure 9-16. The OVA File and VSM R
Page 595 and 596:
Figure 9-18. Configuring the Networ
Page 597 and 598:
Figure 9-20. VSM Configuration Attr
Page 599 and 600:
Figure 9-22. VSM Installation Proce
Page 601 and 602:
Figure 9-24. VSM Installation Summa
Page 603 and 604:
1000v Management Center. Note For t
Page 605 and 606:
Figure 9-28. Entering the Nexus 100
Page 607 and 608:
Figure 9-30. VEM Configuration Summ
Page 609 and 610:
Figure 9-32. Configuring the Nexus
Page 611 and 612:
Reboot Required: false VIBs Install
Page 613 and 614:
vsm(config-port-prof)# no shutdown
Page 615 and 616:
Figure 9-34. Adding the VEM Through
Page 617 and 618:
Figure 9-36. Selecting the ESX Host
Page 619 and 620:
Figure 9-38. Selecting the VM to Mi
Page 621 and 622:
Figure 9-40. Verifying That the ESX
Page 623 and 624:
--- -------------------------------
Page 625 and 626:
vsm# Note There is a 60-day evaluat
Page 627 and 628:
Figure 9-41. 1000V-Topology Example
Page 629 and 630:
vsm(config)# Example 9-11 shows how
Page 631 and 632:
Figure 9-43. Selecting the vmkernel
Page 633 and 634:
2012 Aug 23 22:29:33 vsm %VIM-5-IF_
Page 635 and 636:
• VLAN configuration • VMware m
Page 637 and 638:
vsm(config-port-prof)# no shutdown
Page 639 and 640:
HR-APPS Veth3 Net Adapter 1 Demo-Te
Page 641 and 642:
Figure 9-46. Verifying the Port-Pro
Page 643 and 644:
Click here to view code image Sampl
Page 645 and 646:
(vASA) to deploy virtualized servic
Page 647 and 648:
Figure 9-49. Verifying the OVF Depl
Page 649 and 650:
Figure 9-51. Specifying the Data Ce
Page 651 and 652:
Figure 9-53. Specifying the Specifi
Page 653 and 654:
Figure 9-55. Specifying the Datasto
Page 655 and 656:
Figure 9-57. Specifying the IP Addr
Page 657 and 658:
Figure 9-59. Verifying the Informat
Page 659 and 660:
Figure 9-63. Displaying the VNMC Vi
Page 661 and 662:
Figure 9-65. Browse to the VNMC Man
Page 663 and 664:
Figure 9-68. Install the Extension
Page 665 and 666:
8. Add vCenter VM Manager in VNMC (
Page 667 and 668:
Figure 9-75. Display vCenter ESX Ho
Page 669 and 670:
workloads. Deployment of virtualize
Page 671 and 672:
Figure 9-77. VSG System Component C
Page 673 and 674:
ootflash:/repository Directory Clic
Page 675 and 676:
Configuring the Cisco VNMC Policy-A
Page 677 and 678:
Creating a Tenant in VMMC Figure 9-
Page 679 and 680:
Figure 9-83. Creating a Virtual Dat
Page 681 and 682:
Figure 9-87. Create a Security Prof
Page 683 and 684:
Figure 9-89. Creating a Security Pr
Page 685 and 686:
Figure 9-92 shows how to assign the
Page 687 and 688:
Figure 9-95. Adding a Policy in VNM
Page 689 and 690:
demonstrated in Example 9-30. Examp
Page 691 and 692:
profile Employee state enabled vsm(
Page 693 and 694:
Click here to view code image vsm#
Page 695 and 696:
Figure 9-100. Create a vmk Interfac
Page 697 and 698:
Example 9-39. Verify the vPath Info
Page 699 and 700:
Flow Lookup Hit 229 Flow Lookup Mis
Page 701 and 702:
Destroy 8 L4 TCP Flow Create 0 L4 T
Page 703 and 704:
Rcvd 0 L2-Frag Coalesced 0 Encap ex
Page 705 and 706:
Encap Err 0 0 0 All- Drops 38 1 Flo
Page 707 and 708:
DV Port : 161 DVS uuid : ed 5d 0b 5
Page 709 and 710:
Figure 9-103 shows the VXLAN topolo
Page 711 and 712:
Enter configuration commands, one p
Page 713 and 714:
Figure 9-105. Assigning vmknic 10.1
Page 715 and 716:
Figure 9-108. Assigning the VxLAN-V
Page 717 and 718:
Figure 9-110. The VMs and ESX Host
Page 719 and 720:
Figure 9-112. Verifying the VM IP A
Page 721 and 722:
Segment BD Error: 0 Dest Mcast IP n
Page 723 and 724:
Pinning Failed on Decap: 0 Can't ge
Page 725 and 726:
75 Multicast Packets 1801 Broadcast
Page 727 and 728:
0 Input Packet Drops 0 Output Packe
Page 729 and 730:
2 Eth3/3 3 182 0013.21cb.eb94 dynam
Page 731 and 732:
105 0050.568b.1c32 dynamic 47 Eth4/
Page 733 and 734:
username admin password 5 $1$Sx5LsG
Page 735 and 736:
switchport access vlan 182 no shutd
Page 737 and 738:
capability l3-vn-service vmware dvp
Page 739 and 740:
ip ttl 64 ip prec 0 ip dscp 0 mtu 1
Page 741 and 742:
VM version 7. VM type Other Linux 6
Page 743 and 744:
Figure 9-116. Option to Install the
Page 745 and 746:
Figure 9-118. Login Prompt After Bo
Page 747 and 748:
session 1 --------------- type : er
Page 749 and 750:
Figure 9-121. Selecting or Changing
Page 751 and 752:
Figure 9-124. Defining the Subnet I
Page 753 and 754:
Figure 9-126. Monitoring and Traffi
Page 755 and 756:
1000v.VSG1.3.1a.iso 246831104 Aug 0
Page 757 and 758:
Chapter 10. Quality of Service (QoS
Page 759 and 760:
Nexus devices enable class maps to
Page 761 and 762:
switch to offer lossless services o
Page 763 and 764:
============================ policy
Page 765 and 766:
The queues are hardware components
Page 767 and 768:
queue-limit percent 16 queue droppe
Page 769 and 770:
the remaining queues to schedule tr
Page 771 and 772:
default-4q-8e-out- Service-policy (
Page 773 and 774:
N7K-2(config-pmap-que)# class type
Page 775 and 776:
Class-map (queuing): 1p7q4t-out-q3
Page 777 and 778:
fex port interface: Ethernet101/1/1
Page 779 and 780:
FCoE is defined by default, it is g
Page 781 and 782:
Service-policy (queuing) output: de
Page 783 and 784:
Service-policy (queuing) input: voi
Page 785 and 786:
QoS on Nexus 1000V The Nexus 1000V
Page 787 and 788:
Click here to view code image demol
Page 789 and 790:
demolab-vsm1(config-cmap-que)# exit
Page 791 and 792:
the overlay; this enables data cent
Page 793 and 794:
• OTV join-interface: The OTV joi
Page 795 and 796:
identifier is mandatory to configur
Page 797 and 798:
AED)Overlay1 59* otv- 1 active Over
Page 799 and 800:
Stale routes during non-graceful co
Page 801 and 802:
57 0050.5692.48d1 42 1w4d overlay o
Page 803 and 804:
59 0050.569c.2902 1 4d00h site port
Page 805 and 806:
channel1002 61 00e0.81c2.4a74 42 1w
Page 807 and 808:
and preventing unicast-flooding in
Page 809 and 810:
ip pim rp-address 40.10.10.50 group
Page 811 and 812:
Example 11-14. Sample Configuration
Page 813 and 814:
102-103, 106, 116, 120, 122 (Total:
Page 815 and 816:
For the Layer 2 multicast communica
Page 817 and 818:
MAC_ vlan vlan-name interface OTV-i
Page 819 and 820:
Example 11-19 shows the OTV ARP Cac
Page 821 and 822:
! mac access-list ALL_MACs 10 permi
Page 823 and 824:
methods are discussed from a high-l
Page 825 and 826:
ip route 10.1.64.128/25 Null0 250 r
Page 827 and 828:
• VRF-Aware Telnet • VRF-Aware
Page 829 and 830:
Ethernet10/22 default 1 - - Etherne
Page 831 and 832:
for any subsequent show or EXEC com
Page 833 and 834:
N7k-1(config)# feature isis N7k-1(c
Page 835 and 836:
Paths: (1 available, best #1) Flags
Page 837 and 838:
• Label Switching Router (LSR): A
Page 839 and 840:
N7k-1(config)# install feature-set
Page 841 and 842:
192.168.0.2 2.2.2.2 From a CE to PE
Page 843 and 844:
Click here to view code image N7k-1
Page 845 and 846:
license be installed first. The Nex
Page 847 and 848:
• EID addresses: The IP addresses
Page 849 and 850:
Note Consult the following link to
Page 851 and 852:
destination of 172.20.40.0 /24. LIS
Page 853 and 854:
infrastructure, destined to one of
Page 855 and 856:
13-3. Example 13-3. Define the Glob
Page 857 and 858:
Layer 3 SVI interface. Note The mul
Page 859 and 860:
authentication-key 3 9125d59c18a9b0
Page 861 and 862:
Click here to view code image N7K1#
Page 863 and 864:
Who last registered: 1.1.1.13 Routi
Page 865 and 866:
connects the xTR to the L3 domain o
Page 867 and 868:
Design Goals Figure 14-1. Existing
Page 869 and 870:
must go smoothly. With this in mind
Page 871 and 872:
10.255.255.2 vrf VPCKA peer-gateway
Page 873 and 874:
dove(config-if)# shutdown dove(conf
Page 875 and 876:
Click here to view code image bluej
Page 877 and 878:
outed full 10G 10g Po2 to CS1 (BLUE
Page 879 and 880:
with previous steps, these port-cha
Page 881 and 882:
scotland(config-if)# switchport sco
Page 883 and 884:
Design Note Care has been given to
Page 885 and 886:
w - waiting to be aggregated Number
Page 887 and 888:
0023.04ee.be01 0 2 20 15 This bridg
Page 889 and 890:
denmark# show run interface Vlan26
Page 891 and 892:
! We want this to be an undesirable
Page 893 and 894:
egypt(config-if)# shutdown egypt(co
Page 895 and 896:
egypt# conf t Enter configuration c
Page 897 and 898:
TenGigabitEthernet4/3 D 10.198.57.0
Page 899 and 900:
egypt(config-if-hsrp)# interface vl
Page 901 and 902:
Standby 10.198.208.4 local 10.198.2
Page 903 and 904:
0023.04ee.be01 3 2 20 15 Po100 VLAN
Page 905 and 906:
Figure 14-4. Migrated Topology One
Page 907 and 908:
Figure 14-5. Topology with 5K/2K De
Page 909 and 910:
Example 14-52. vPC Configuration on
Page 911 and 912:
channel-group 101 interface Etherne
Page 913 and 914:
stub routing, 146 summarization, 14
Page 915 and 916:
oadcast storms, traffic storm contr
Page 917 and 918:
multicasts, 253 CP (Control Process
Page 919 and 920:
Nexus 7000, 386-392 overview of, 38
Page 921 and 922:
authentication, 174-203 configuring
Page 923 and 924:
stateful switchovers, 368-369 Unifi
Page 925 and 926:
isolated VLAN (Virtual Local Area N
Page 927 and 928:
Rapid-PVST, 80-87 RootGuard, 96-97
Page 929 and 930:
LSP, 719 LSR, 719 managing, 725 Nex
Page 931 and 932:
LoopGuard, 97-98 Loose Unicast RPF
Page 933 and 934:
defining, 719 enabling, 721-722 ope
Page 935 and 936:
Atomic mode, 434 Best-Effort mode,
Page 937 and 938:
Nexus 1000v NX-OS licensing, 9 NX-O
Page 939 and 940:
FCoE installation, 478-479 MDS FCoE
Page 941 and 942:
network advertisements, 157 passive
Page 943 and 944:
topology of, 155, 170 VRF configura
Page 945 and 946:
ARP synchronization, 117 flow contr
Page 947 and 948:
FEX, 661-662 forwarding architectur
Page 949 and 950:
HSRP, 174-203 IP Source Guard, 321-
Page 951 and 952:
snooping DHCP snooping, 313-316 IGM
Page 953 and 954:
configuration files, 33-35 file sys
Page 955 and 956:
enabling FCoE, 468 enabling NPV mod
Page 957 and 958:
Single-Hop FCoE configuration, 471-
Page 959:
port profile creation, 545-546 port
show all

nx.os.and.cisco.nexus.switching.2nd.edition.1587143046

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?