Cisco Nexus 5600 Series Configuration Manual

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

First Published: 2014-03-15

Last Modified: 2017-01-22

Americas Headquarters

Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883

Text Part Number: OL-31641-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of the UNIX operating system. All rights reserved. Copyright©1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWAREOF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://

www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership

relationship between Cisco and any other company. (1110R)

Preface

CHAPTER 1

CHAPTER 2

CHAPTER 3

Preface xix

Audience xix

Document Conventions xix

Related Documentation for Cisco Nexus 5600 Series NX-OS Software xxi

Documentation Feedback xxii

Obtaining Documentation and Submitting a Service Request xxii

New and Changed Information 1

Overview 3

System Management Features 3

Configuring Switch Profiles 7

Information About Switch Profiles 8

Switch Profile Configuration Modes 8

Configuration Validation 9

Software Upgrades and Downgrades with Switch Profiles 10

Prerequisites for Switch Profiles 10

Guidelines and Limitations for Switch Profiles 10

Configuring Switch Profiles 12

Adding a Switch to a Switch Profile 13

Adding or Modifying Switch Profile Commands 15

Importing a Switch Profile 17

Importing Configurations in a vPC Topology 19

Verifying Commands in a Switch Profile 19

Isolating a Peer Switch 20

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

OL-31641-01 iii

Contents

Deleting a Switch Profile 20

Deleting a Switch from a Switch Profile 21

Displaying the Switch Profile Buffer 22

Synchronizing Configurations After a Switch Reboot 23

Switch Profile Configuration show Commands 23

Configuration Examples for Switch Profiles 24

Creating a Switch Profile on a Local and Peer Switch Example 24

Verifying the Synchronization Status Example 26

Displaying the Running Configuration 26

Displaying the Switch Profile Synchronization Between Local and Peer Switches 27

Displaying Verify and Commit on Local and Peer Switches 28

Successful and Unsuccessful Synchronization Examples 29

Configuring the Switch Profile Buffer, Moving the Buffer, and Deleting the Buffer 29

CHAPTER 4

CHAPTER 5

Replacing a Cisco Nexus 5000 Series Switch 30

Configuring Module Pre-Provisioning 33

Information About Module Pre-Provisioning 33

Guidelines and Limitations 33

Enabling Module Pre-Provisioning 34

Removing Module Pre-Provisioning 35

Verifying the Pre-Provisioned Configuration 35

Configuration Examples for Pre-Provisioning 36

Using Cisco Fabric Services 37

Information About CFS 37

Cisco Fabric Services over Ethernet 38

Guidelines and Limitations for CFS 38

CFS Distribution 39

CFS Distribution Modes 39

Uncoordinated Distribution 39

Coordinated Distribution 39

Unrestricted Uncoordinated Distributions 40

Verifying the CFS Distribution Status 40

CFS Support for Applications 40

CFS Application Requirements 40

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

iv OL-31641-01

Contents

Enabling CFS for an Application 41

Verifying Application Registration Status 41

Locking the Network 41

Verifying CFS Lock Status 42

Committing Changes 42

Discarding Changes 43

Saving the Configuration 43

Clearing a Locked Session 43

CFS Regions 44

About CFS Regions 44

Example Scenario 44

Managing CFS Regions 44

Creating CFS Regions 44

Assigning Applications to CFS Regions 45

Moving an Application to a Different CFS Region 45

Removing an Application from a Region 46

Deleting CFS Regions 46

Configuring CFS over IP 47

Enabling CFS over IPv4 47

Enabling CFS over IPv6 47

Verifying the CFS Over IP Configuration 48

Configuring IP Multicast Addresses for CFS over IP 48

Configuring IPv4 Multicast Address for CFS 48

Configuring IPv6 Multicast Address for CFS 48

Verifying the IP Multicast Address Configuration for CFS over IP 49

Default Settings for CFS 49

Enabling CFS to Distribute Smart Call Home Configurations 50

Enabling CFS to Distribute Device Alias Configurations 50

Enabling CFS to Distribute DPVM Configurations 51

Enabling CFS to Distribute FC Domain Configurations 52

Enabling CFS to Distribute FC Port Security Configurations 53

Enabling CFS to Distribute FC Timer Configurations 53

Enabling CFS to Distribute IVR Configurations 54

Enabling CFS to Distribute NTP Configurations 55

Enabling CFS to Distribute RADIUS Configurations 56

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

OL-31641-01 v

Contents

Enabling CFS to Distribute RSCN Configurations 56

Enabling CFS to Distribute TACACS+ Configurations 57

CHAPTER 6

CHAPTER 7

Configuring PTP 59

Information About PTP 59

PTP Device Types 60

PTP Process 61

Clock Management 62

High Availability for PTP 62

Licensing Requirements for PTP 62

Guidelines and Limitations for PTP 62

Default Settings for PTP 63

Configuring PTP 63

Configuring PTP Globally 63

Configuring PTP on an Interface 65

Verifying the PTP Configuration 66

Feature History for PTP 67

Configuring User Accounts and RBAC 69

Information About User Accounts and RBAC 69

User Roles 69

Predefined SAN Admin User Role 70

Rules 71

SAN Admin Role-Feature Rule Mapping 71

User Role Policies 73

User Account Configuration Restrictions 74

User Password Requirements 75

Guidelines and Limitations for User Accounts 75

Configuring User Accounts 76

Configuring SAN Admin Users 77

Configuring RBAC 78

Creating User Roles and Rules 78

Creating Feature Groups 79

Changing User Role Interface Policies 80

Changing User Role VLAN Policies 80

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

vi OL-31641-01

Contents

Changing User Role VSAN Policies 81

Verifying the User Accounts and RBAC Configuration 82

Configuring User Accounts Default Settings for the User Accounts and RBAC 82

CHAPTER 8

CHAPTER 9

Configuring Session Manager 85

Information About Session Manager 85

Guidelines and Limitations for Session Manager 85

Configuring Session Manager 86

Creating a Session 86

Configuring ACLs in a Session 86

Verifying a Session 87

Committing a Session 87

Saving a Session 87

Discarding a Session 87

Configuration Example for Session Manager 88

Verifying the Session Manager Configuration 88

Configuring Online Diagnostics 89

Information About Online Diagnostics 89

Bootup Diagnostics 89

CHAPTER 10

Health Monitoring Diagnostics 90

Expansion Module Diagnostics 91

Configuring Online Diagnostics 92

Verifying the Online Diagnostics Configuration 92

Default Settings for Online Diagnostics 93

Configuring System Message Logging 95

Information About System Message Logging 95

Syslog Servers 96

Licensing Requirements for System Message Logging 96

Guidelines and Limitations for System Message Logging 97

Default Settings for System Message Logging 97

Configuring System Message Logging 97

Configuring System Message Logging to Terminal Sessions 97

Configuring System Message Logging to a File 99

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

OL-31641-01 vii

Contents

Configuring Module and Facility Messages Logging 101

Configuring Logging Timestamps 102

Configuring Syslog Servers 103

Configuring syslog on a UNIX or Linux System 104

Configuring syslog Server Configuration Distribution 105

Displaying and Clearing Log Files 107

Verifying the System Message Logging Configuration 107

Configuring ACL Logging 108

Information About ACL Logging 108

Configuring the ACL Logging Cache 110

Applying ACL Logging to an Interface 110

Configuring VLAN Access Map with Logging 111

Configuring the ACL Log Match Level 112

CHAPTER 11

Configuring Rate Limiter for ACL Logging 112

Clearing ACL Logs 112

Verifying ACL Logging 113

Configuring Smart Call Home 115

Information About Smart Call Home 115

Smart Call Home Overview 116

Smart Call Home Destination Profiles 116

Smart Call Home Alert Groups 117

Smart Call Home Message Levels 118

Call Home Message Formats 119

Guidelines and Limitations for Smart Call Home 124

Prerequisites for Smart Call Home 124

Default Call Home Settings 125

Configuring Smart Call Home 125

Registering for Smart Call Home 125

Configuring Contact Information 126

Creating a Destination Profile 127

Modifying a Destination Profile 128

Associating an Alert Group with a Destination Profile 130

Adding Show Commands to an Alert Group 130

Configuring E-Mail Server Details 131

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

viii OL-31641-01

Contents

Configuring Periodic Inventory Notifications 132

Disabling Duplicate Message Throttling 133

Enabling or Disabling Smart Call Home 134

Testing the Smart Call Home Configuration 134

Verifying the Smart Call Home Configuration 135

Sample Syslog Alert Notification in Full-Text Format 136

Sample Syslog Alert Notification in XML Format 136

CHAPTER 12

CHAPTER 13

Configuring Rollback 141

Information About Rollbacks 141

Guidelines and Limitations for Rollback 141

Creating a Checkpoint 142

Implementing a Rollback 143

Verifying the Rollback Configuration 143

Configuring DNS 145

Information About DNS Client 145

Name Servers 145

DNS Operation 146

High Availability 146

Prerequisites for DNS Clients 146

Licensing Requirements for DNS Clients 146

Default Settings for DNS Clients 146

Configuring DNS Clients 147

CHAPTER 14

Configuring SNMP 149

Information About SNMP 149

SNMP Functional Overview 149

SNMP Notifications 150

SNMPv3 150

Security Models and Levels for SNMPv1, v2, and v3 151

User-Based Security Model 152

CLI and SNMP User Synchronization 152

Group-Based SNMP Access 153

Licensing Requirements for SNMP 153

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

OL-31641-01 ix

Contents

Guidelines and Limitations for SNMP 153

Default SNMP Settings 154

Configuring SNMP 154

Configuring SNMP Users 154

Enforcing SNMP Message Encryption 155

Assigning SNMPv3 Users to Multiple Roles 155

Creating SNMP Communities 156

Filtering SNMP Requests 156

Configuring SNMP Notification Receivers 156

Configuring SNMP Notification Receivers with VRFs 158

Filtering SNMP Notifications Based on a VRF 158

Configuring a Source Interface for Sending Out All SNMP Notifications 159

Configuring a Host Receiver for SNMP Notifications 160

CHAPTER 15

Configuring SNMP for Inband Access 160

Enabling SNMP Notifications 161

Configuring Link Notifications 163

Disabling Link Notifications on an Interface 164

Enabling One-Time Authentication for SNMP over TCP 165

Assigning SNMP Switch Contact and Location Information 165

Configuring the Context to Network Entity Mapping 165

Modifying the AAA Synchronization Time 166

Disabling SNMP 167

Verifying the SNMP Configuration 167

Configuring RMON 169

Information About RMON 169

RMON Alarms 169

RMON Events 170

Configuration Guidelines and Limitations for RMON 170

Configuring RMON 171

Configuring RMON Alarms 171

Configuring RMON Events 172

Verifying the RMON Configuration 172

Default RMON Settings 173

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

x OL-31641-01

Contents

CHAPTER 16

Configuring SPAN 175

Information About SPAN 176

SPAN Sources 176

Characteristics of Source Ports 176

SPAN Destinations 177

Characteristics of Destination Ports 177

Multiple SPAN Destinations 177

SPAN with ACL 178

SPAN on Drop 178

SPAN-on-Latency Sessions 178

Guidelines and Limitations for SPAN 178

Creating or Deleting a SPAN Session 181

Configuring an Ethernet Destination Port 182

Configuring MTU Truncation for Each SPAN Session 183

Configuring the Rate Limit for SPAN Traffic 183

Configuring Source Ports 184

CHAPTER 17

Configuring Source Port Channels, VSANs, or VLANs 185

Configuring the Description of a SPAN Session 185

Configuring an ACL Filter for a SPAN Session 186

Configuring a SPAN-on-Drop Session 187

Configuring a SPAN-on-Latency Session 188

Activating a SPAN Session 189

Suspending a SPAN Session 190

Troubleshooting SPAN session issues 190

Troubleshooting SPAN session with large number of source ports issues 190

Displaying SPAN Information 191

Configuration Example for a SPAN ACL 192

Configuration Example for SPAN-on-Latency Session 192

Configuring ERSPAN 193

Information About ERSPAN 193

ERSPAN Source Sessions 193

Monitored Traffic 194

ERSPAN Types 194

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

OL-31641-01 xi

Contents

ERSPAN Sources 195

ERSPAN Destinations 195

Truncated ERSPAN 196

ERSPAN with ACL 196

ERSPAN SPAN on Drop 196

ERSPAN SPAN-on-Latency 196

Multiple ERSPAN Sessions 197

High Availability 197

Licensing Requirements for ERSPAN 197

Prerequisites for ERSPAN 197

Guidelines and Limitations for ERSPAN 197

Guidelines and Limitations for ERSPAN Type III 201

Default Settings for ERSPAN 201

Configuring ERSPAN 201

Configuring an ERSPAN Source Session 201

Configuring an ERSPAN Type III Source Session 203

Configuring Truncated ERSPAN 206

Configuring an ERSPAN Destination Session 207

Configuring an ERSPAN SPAN-on-Drop Session 209

Configuring an ERSPAN SPAN-on-Latency Session 210

Shutting Down or Activating an ERSPAN Session 212

Verifying the ERSPAN Configuration 214

Configuration Examples for ERSPAN 215

Configuration Example for an ERSPAN Source Session 215

Configuration Example for an ERSPAN Type III Source Session 215

Configuration Example for an IP Address as the Source for an ERSPAN Session 215

Configuration Example for Truncated ERSPAN 216

Configuration Example for an ERSPAN Destination Session 216

Configuration Example for an ERSPAN ACL 216

Configuration Example for an ERSPAN SPAN-on-Drop Session 216

Configuration Example for ERSPAN SPAN-on-Latency Session 217

Additional References 217

Preface

The preface contains the following sections:

Audience, page xix

•

Document Conventions, page xix

•

Related Documentation for Cisco Nexus 5600 Series NX-OS Software, page xxi

•

Documentation Feedback, page xxii

•

Obtaining Documentation and Submitting a Service Request, page xxii

•

Audience

This publication is for network administrators who configure and maintain Cisco Nexus devices.

Document Conventions

Note

OL-31641-01 xix

As part of our constant endeavor to remodel our documents to meet our customers' requirements, we have modified the manner in which we document configuration tasks. As a result of this, you may find a deviation in the style used to describe these tasks, with the newly included sections of the document following the new format.

Command descriptions use the following conventions:

DescriptionConvention

bold

Italic

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

Bold text indicates the commands and keywords that you enter literally as shown.

Italic text indicates arguments for which the user supplies the values.

Square brackets enclose an optional element (keyword or argument).[x]

Document Conventions

Preface

DescriptionConvention

[x | y]

Square brackets enclosing keywords or arguments separated by a vertical bar indicate an optional choice.

{x | y}

Braces enclosing keywords or arguments separated by a vertical bar indicate a required choice.

[x {y | z}]

Nested set of square brackets or braces indicate optional or required choices within optional or required elements. Braces and a vertical bar within square brackets indicate a required choice within an optional element.

variable

Indicates a variable for which you supply values, in context where italics cannot be used.

string

A nonquoted set of characters. Do not use quotation marks around the string or the string will include the quotation marks.

Examples use the following conventions:

DescriptionConvention

Terminal sessions and information the switch displays are in screen font.screen font

Information you must enter is in boldface screen font.boldface screen font

Note

Caution

italic screen font

Arguments for which you supply values are in italic screen font.

Nonprinting characters, such as passwords, are in angle brackets.< >

Default responses to system prompts are in square brackets.[ ]

!, #

An exclamation point (!) or a pound sign (#) at the beginning of a line of code indicates a comment line.

This document uses the following conventions:

Means reader take note. Notes contain helpful suggestions or references to material not covered in the manual.

Means reader be careful. In this situation, you might do something that could result in equipment damage or loss of data.

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

xx OL-31641-01

Preface

Documentation Feedback

The documents in this category include:

Cisco Nexus 5600 Series NX-OS Fabric Extender Command Reference

•

Cisco Nexus 5600 Series NX-OS FabricPath Command Reference

•

Cisco Nexus 5600 Series NX-OS Fibre Channel Command Reference

•

Cisco Nexus 5600 Series NX-OS Fundamentals Command Reference

•

Cisco Nexus 5600 Series NX-OS Interfaces Command Reference

•

Cisco Nexus 5600 Series NX-OS Layer 2 Interfaces Command Reference

•

Cisco Nexus 5600 Series NX-OS Multicast Routing Command Reference

•

Cisco Nexus 5600 Series NX-OS QoS Command Reference

•

Cisco Nexus 5600 Series NX-OS Security Command Reference

•

Cisco Nexus 5600 Series NX-OS System Management Command Reference

•

Cisco Nexus 5600 Series NX-OS TrustSec Command Reference

•

Preface

Cisco Nexus 5600 Series NX-OS Unicast Routing Command Reference

•

Cisco Nexus 5600 Series NX-OS Virtual Port Channel Command Reference

•

Error and System Messages

The Cisco Nexus 5600 Series NX-OS System Message Guide is available at http://www.cisco.com/en/US/docs/

switches/datacenter/nexus5500/sw/system_messages/reference/sl_nxos_book.html.

Troubleshooting Guide

The Cisco Nexus 5600 Series NX-OS Troubleshooting Guide is available at http://www.cisco.com/c/en/us/

support/switches/nexus-5000-series-switches/products-troubleshooting-guides-list.html.

Documentation Feedback

To provide technical feedback on this document, or to report an error or omission, please send your comments to: .

We appreciate your feedback.

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What's New in Cisco Product Documentation.

To receive new and revised Cisco technical content directly to your desktop, you can subscribe to the What's

New in Cisco Product Documentation RSS feed. RSS feeds are a free service.

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

xxii OL-31641-01

New and Changed Information

New and Changed Information, page 1

•

New and Changed Information

The following table provides an overview of the significant changes made to this configuration guide. The table does not provide an exhaustive list of all changes made to this guide or all new features in a particular release.

CHAPTER 1

Where DocumentedReleaseDescriptionFeature

Soft Reload

GIR Enhancement

best effort mechanism for the switch to be gracefully brought up with minimal impact to production traffic when a process crash occurs. You can also use the soft-reload command to trigger a manual soft reload of the switch.

7.3(0)N1(1), the default mode for GIR is “isolate”. Provides support for Unplanned Maintenance, Maintenance Mode timer, Supress FIB Pending, Adding Show commands to snapshots and dumping snapshot sections. You can use GIR to perform maintenance and software upgrade of the switches and the connected FEXs. A FEX group is added to optimize the procedure to bring up or take down the FEX.

Soft Reload7.3(2)N1(1)The Soft Reload feature provides a

7.3(0)N1(1)Starting with Cisco NX-OS Release

Configuring GIR (Cisco NX-OS Release 7.3(0)N1(1))

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

OL-31641-01 1

New and Changed Information

Where DocumentedReleaseDescriptionFeature

Class-based Quality-of-Service MIB Phase 2

Performing Software Maintenance Upgrades

Class-based Quality-of-Service MIB

Isolate and Maintenance Mode Enhancement

7.3(0)N1(1), the following cbQoSMIB tables are also supported by QoS policies: cbQosClassMapStats, cbQosMatchStmtStats and cbQosQueueingStats

(SMU) is a package file that contains fixes for specific defects. SMUs are created to respond to immediate issues and do not include new features.

Management Protocol (SNMP) MIB that enables retrieval of class-map and policy-map configuration and statistics.

eject a switch and isolate it from the network so that debugging or an upgrade can be performed. The switch is removed from the regular switching path and put into a maintenance mode. Once maintenance on the switch is complete, you can bring the switch into full operational mode.

7.3(0)N1(1)Starting with Cisco NX-OS Release

Class-based Quality-of-Service MIB

7.2(1)N1(1)A software maintenance upgrade

Performing Software Maintenance Upgrades

7.1(1)N1(1)Provides the Simple Network

Class-based Quality-of-Service MIB

7.1(0)N1(1)Provides the ability to gracefully

Configuring GIR (Cisco NX-OS Release 7.1(0)N1(1))

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

2 OL-31641-01

Overview

This chapter contains the following sections:

System Management Features, page 3

•

System Management Features

The system management features documented in this guide are described below:

CHAPTER 2

DescriptionFeature

Switch Profiles

Module Pre-Provisioning

Configuration synchronization allows administrators to make configuration changes on one switch and have the system automatically synchronize the configuration to a peer switch. This feature eliminates misconfigurations and reduces the administrative overhead.

The configuration synchronization mode (config-sync) allows users to create switch profiles to synchronize local and peer switch.

Module pre-provisioning feature allows users to pre-configure interfaces before inserting or attaching a module to a Cisco Nexus Series switch. If a module goes offline, users can also use pre-provisioning to make changes to the interface configurations for the offline module. In some vPC topologies, pre-provisioning is required for the configuration synchronization feature. Pre-provisioning allows users to synchronize the configuration for an interface that is online with one peer but offline with another peer.

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

OL-31641-01 3

System Management Features

Overview

DescriptionFeature

Cisco Fabric Services

Precision Time Protocol

User Accounts and RBAC

Session Manager

Online Diagnostics

The Cisco MDS NX-OS software uses the Cisco Fabric Services (CFS) infrastructure to enable efficient database distribution and to promote device flexibility. CFS simplifies SAN provisioning by automatically distributing configuration information to all switches in a fabric.

The Precision Time Protocol (PTP) is a time synchronization protocol for nodes distributed across a network. Its hardware timestamp feature provides greater accuracy than other time synchronization protocols such as Network Time Protocol (NTP).

User accounts and role-based access control (RBAC) allow you to define the rules for an assigned role. Roles restrict the authorization that the user has to access management operations. Each user role can contain multiple rules and each user can have multiple roles.

Session Manager allows you to create a configuration and apply it in batch mode after the configuration is reviewed and verified for accuracy and completeness.

Cisco Generic Online Diagnostics (GOLD) define a common framework for diagnostic operations across Cisco platforms. The online diagnostic framework specifies the platform-independent fault-detection architecture for centralized and distributed systems, including the common diagnostics CLI and the platform-independent fault-detection procedures for boot-up and run-time diagnostics.

The platform-specific diagnostics provide hardware-specific fault-detection tests and allow you to take appropriate corrective action in response to diagnostic test results.

System Message Logging

You can use system message logging to control the destination and to filter the severity level of messages that system processes generate. You can configure logging to a terminal session, a log file, and syslog servers on remote systems.

System message logging is based on RFC 3164. For more information about the system message format and the messages that the device generates, see the Cisco NX-OS System Messages Reference.

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

4 OL-31641-01

Overview

System Management Features

DescriptionFeature

Smart Call Home

Configuration Rollback

SNMP

Call Home provides an e-mail-based notification of critical system policies. Cisco NX-OS provides a range of message formats for optimal compatibility with pager services, standard e-mail, or XML-based automated parsing applications. You can use this feature to page a network support engineer, e-mail a Network Operations Center, or use Cisco Smart Call Home services to automatically generate a case with the Technical Assistance Center.

The configuration rollback feature allows users to take a snapshot, or user checkpoint, of the Cisco NX-OS configuration and then reapply that configuration to a switch at any point without having to reload the switch. A rollback allows any authorized administrator to apply this checkpoint configuration without requiring expert knowledge of the features configured in the checkpoint.

The Simple Network Management Protocol (SNMP) is an application-layer protocol that provides a message format for communication between SNMP managers and agents. SNMP provides a standardized framework and a common language used for the monitoring and management of devices in a network.

RMON

SPAN

RMON is an Internet Engineering Task Force (IETF) standard monitoring specification that allows various network agents and console systems to exchange network monitoring data. Cisco NX-OS supports RMON alarms, events, and logs to monitor Cisco NX-OS devices.

The Switched Port Analyzer (SPAN) feature (sometimes called port mirroring or port monitoring) selects network traffic for analysis by a network analyzer. The network analyzer can be a Cisco SwitchProbe, a Fibre Channel Analyzer, or other Remote Monitoring (RMON) probes.

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

OL-31641-01 5

System Management Features

Overview

DescriptionFeature

ERSPAN

Encapsulated remote switched port analyzer (ERSPAN) is used to transport mirrored traffic in an IP network. ERSPAN supports source ports, source VLANs, and destinations on different switches, which provide remote monitoring of multiple switches across your network. ERSPAN uses a generic routing encapsulation (GRE) tunnel to carry traffic between switches.

ERSPAN consists of an ERSPAN source session, routable ERSPAN GRE-encapsulated traffic, and an ERSPAN destination session. You separately configure ERSPAN source sessions and destination sessions on different switches.

To configure an ERSPAN source session on one switch, you associate a set of source ports or VLANs with a destination IP address, ERSPAN ID number, and virtual routing and forwarding (VRF) name. To configure an ERSPAN destination session on another switch, you associate the destinations with the source IP address, the ERSPAN ID number, and a VRF name.

The ERSPAN source session copies traffic from the source ports or source VLANs and forwards the traffic using routable GRE-encapsulated packets to the ERSPAN destination session. The ERSPAN destination session switches the traffic to the destinations.

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

6 OL-31641-01

CHAPTER 3

Configuring Switch Profiles

This chapter contains the following sections:

Information About Switch Profiles, page 8

•

Switch Profile Configuration Modes, page 8

•

Configuration Validation, page 9

•

Software Upgrades and Downgrades with Switch Profiles, page 10

•

Prerequisites for Switch Profiles, page 10

•

Guidelines and Limitations for Switch Profiles, page 10

•

Configuring Switch Profiles, page 12

•

Adding a Switch to a Switch Profile, page 13

•

Adding or Modifying Switch Profile Commands, page 15

•

Importing a Switch Profile, page 17

•

Importing Configurations in a vPC Topology, page 19

•

Verifying Commands in a Switch Profile, page 19

•

Isolating a Peer Switch, page 20

•

Deleting a Switch Profile, page 20

•

Deleting a Switch from a Switch Profile, page 21

•

Displaying the Switch Profile Buffer, page 22

•

Synchronizing Configurations After a Switch Reboot, page 23

•

Switch Profile Configuration show Commands, page 23

•

Configuration Examples for Switch Profiles, page 24

•

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

OL-31641-01 7

Information About Switch Profiles

Several applications require consistent configuration across Cisco Nexus Series switches in the network. For example, with a Virtual Port Channel (vPC), you must have identical configurations. Mismatched configurations can cause errors or misconfigurations that can result in service disruptions.

The configuration synchronization (config-sync) feature allows you to configure one switch profile and have the configuration be automatically synchronized to the peer switch. A switch profile provides the following benefits:

Allows configurations to be synchronized between switches.

•

Merges configurations when connectivity is established between two switches.

•

Provides control of exactly which configuration gets synchronized.

•

Ensures configuration consistency across peers through merge and mutual-exclusion checks.

•

Provides verify and commit semantics.

•

Supports configuring and synchronizing port profile configurations.

•

Configuring Switch Profiles

Provides an import command to migrate existing vPC configurations to a switch profile.

•

Switch Profile Configuration Modes

The switch profile feature includes the following configuration modes:

Configuration Synchronization Mode

•

Switch Profile Mode

•

Switch Profile Import Mode

•

Configuration Synchronization Mode

The configuration synchronization mode (config-sync) allows you to create switch profiles using the config sync command on the local switch that you want to use as the master. After you create the profile, you can enter the config sync command on the peer switch that you want to synchronize.

Switch Profile Mode

The switch profile mode allows you to add supported configuration commands to a switch profile that is later synchronized with a peer switch. Commands that you enter in the switch profile mode are buffered until you enter the commit command.

Switch Profile Import Mode

When you upgrade from an earlier release, you have the option to enter the import command to copy supported running-configuration commands to a switch profile. After entering the import command, the switch profile mode (config-sync-sp) changes to the switch profile import mode (config-sync-sp-import). The switch profile import mode allows you to import existing switch configurations from the running configuration and specify which commands you want to include in the switch profile.

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

8 OL-31641-01

+ 348 hidden pages

Cisco Nexus 5600 Series Configuration Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x

CONTENTS

Preface

Audience

Document Conventions

Related Documentation for Cisco Nexus 5600 Series NX-OS Software

Documentation Feedback

Obtaining Documentation and Submitting a Service Request

New and Changed Information

New and Changed Information

Overview

System Management Features

Configuring Switch Profiles

Information About Switch Profiles

Switch Profile Configuration Modes