Cisco WAN :: Port-channel Between Nexus 7000 And 55900?
Jan 16, 2011
I have configured my Nexus 7018 and 5548 as follow (see diag attached).Both 7000 and 5500 are vPC pair(po1and po2). Now I have created port-chanel between 7018and 5548 as port channel PO3 on 5500. Would it give me 20g bandwidth as PO3?or 10g only uplink to 7018? Do I need to config all four 10g links in PO3 on both 5500 and 7000 switches to achieve max b/w and failover?
We are planning to implement the following policy map for egress traffic on an Nexus 7000:
policy-map type queuing dd-1p3q1t-8e-out-10G class type queuing 1p3q1t-8e-out-pq1 priority level 1 shape percent 10 class type queuing 1p3q1t-8e-out-q2 bandwidth remaining percent 5 class type queuing 1p3q1t-8e-out-q3 bandwidth remaining percent 5 class type queuing 1p3q1t-8e-out-q-default bandwidth remaining percent 90
We are using two N7K's to which is one N5K connected through a vPC. From the N5k we use a port-channel with 4 * 10G. Two of this four ports are connected to on N7K and the other two are connected to the other N7K. On the n/K's we are using vPC.
My question now are:
1. Where i have to connect the policy map? To the port-channel or on each physical interface?
2. When i have to connect this policy to the port-channel, how does i have to set the shape percent, when i would like to reserve 10% from the 40G? Does i have to set the shape value to 5% on each N7K because vPC?
I have one cisco Nexus 7000 with version 6.1(2).I created 3 VDC
ADMINCOREsecurity
I have configured 1 - 45 ports for Core and 46 - 48 ports for Security.Now I am not using the VDC Security and I tried to move the assigned ports 46 - 48 from Security to ADMIN.Switch accepted the command .But the ports are not visible on ADMIN VDC.Now it is not showing on Security VDC also. I need this ports in ADMIN VDC
We have added GLC-SX-LH module to E1/1 and E1/10 and speed is set to 1000 (1Gig) Now other side of E1/9 and E1/10 are not connected. Port-channel status is down
Po105 1 eth trunk down No operational members 1000(D) lacp
show interface port-channel 105 shows different bandwidth (100) MTU 1500 bytes, BW 100000 Kbit, DLY 10 usec,question is under interface port-channel105 speed 1000 command inserted automatically.Now if we connect otherisde of interface, during port-channel comes up.what will be the port-channel interface bandwidth ? will it change to 2Gig(2000). Why speed 1000 command inserted automatically on port-channel.Since it is migration, we want to be more specific on the port-channel configuration?
We are running nexus 5018 in our DC.What is the difference betwen "channel-group 214 mode active" and " channel-group 216" Any difference?.. because i have problem with this config we are going build a server config?
We have problem with porth channel down.
5K# sh int po71 port-channel71 is down (No operational members) vPC Status: Down, vPC number: 71 [packets forwarded via vPC peer-link]
I'm running a couple of nexus 7000 to aggregate a building full of 3750Xs.In the past few weeks I have noticed that the vlans I added to the port-profile never got propagated.So I looked at port-profile sync information and here is what comes up: [code] Why the commands are getting cached?
I am trying to limit the incoming and outgoing traffic on a l2 port to 8mbps for a ip subnet within the nexus 7000. The port is connected to my ISP router which has a bandwidth of 20mbps.Policing won't work on a l2 Port and shaping cannot be applied on a port level. url...I have been reading thru the qos guide for nexus release v6 and have problems understanding the different queues.
I am trying to create a port channel between HP servers (4 nic) and two nexus 2k. The server side its a single team with 803.2ad fault taulerence and on the nexus side it have created two port channel (port channel 1 for nexus 2k1 and port channel 2 for nexus 2k2) and made them ACTIVE (channel group mode active)
But when i add a another server on different ports and port channel them the same way as the above server on nexus 2k1 and nexus 2k2, the first server stops pinging. so i have to sht down the first port channel and reopen them - then it works, however it says NO NETWORK ACCESS on the servers (running windows 2008). the only way is to reboot the server i cant be doing this on a production network.
I am having hard time in understanding the hardware port channel resource concept in Nexus 5Ks. Which scenario is considered as a hardware port channel and which is not. According to Cisco documentation, 5548UP switch with layer 3 daughter card only supports 8 hardware port channels, does this mean we can connect only 8 dual homed Fex to those 5Ks.Will a dual homed fex consumes a hardware port channel?
I am a bit confused by the output of 'show run' and 'show run switch-profile' that pertains to a port-channel interface configured in a switch-profile. My main gaol is to find out how can I add/remove the allowed vlans the port-channel (configured as trunk) carries. The setup is like this. I have 2 N5k in vPC domain and Etherner1/11 on both switches is configured as trunk vPC that connects to a core switch. When I issue ‘show run’ for the port-channel and physical interface I get the following output. [code] From above it seems the switch-profile configuration is missing the 'switchport trunk allowed vlan' in the port-channel interface. If want I to remove vlan 30 from the allowed vlan, should I go under the switch-profile mode and remove vlan 30 from the allowed list even though the switch-profile configuration seems to be missing this.
We have a couple of IBM blade chassis with Nexus 4000I 10G blade switch in it. Four 10G ports from each Nexus 4000I switch are bundled into a port channel and connected to Nexus 7K. On the 4k end, one port in the port channel is doing down and coming up as an idividual port. After few minutes it is going down again and coming up as a port-channel member port. It is happening quite offen. [code]
I'm trying to change a vlan on a port-channel but I am getting this error when I apply the change:" error: command is not mutually exclusive",I have done this in the past but I cannot remember exactly what I should type to apply the change.
I'm in the middle of a Nexus 5000 project and recognized today while configuring port-channels, that some of the interface numbers are reserved for internal use.
Is it possible to change or configure which port-channel interface numbers are allocated for internal use by NX-OS?
Unfortunatly I wasn't able to find a solution for this issue in the offical Nexus documentation, the search function of this forum or Google. If I did miss something or didn't look careful enough at the Nexus docs, I'm also happy with RTFM (... fine manual) responses and links to the info :-)
Here is an example of what each switch logs when a server drops offline. Sample logs taken between 5:32am and 5:35am on Feb 20. This particular one was having problems all weekend. Switch #1 encountered over 2000 interface resets. The corresponding VPC port on Switch #2 only had 13 resets.
NEXUS SWITCH #1 2012 Feb 20 05:32:09 q91-sw01-5010 %ETH_PORT_CHANNEL-5-FOP_CHANGED: port-channel10: first operational port changed from Ethernet1/10 to none 2012 Feb 20 05:32:09 q91-sw01-5010 %ETH_PORT_CHANNEL-5-PORT_DOWN: port-channel10: Ethernet1/10 is down 2012 Feb 20 05:32:09 q91-sw01-5010 %ETH_PORT_CHANNEL-5-PORT_DOWN: port-channel10: port-channel10 is down 2012 Feb 20 05:32:09 q91-sw01-5010 %ETHPORT-5-IF_DOWN_PORT_CHANNEL_MEMBERS_DOWN: Interface port-channel10 is down ( No operational members)
I have a router on which I would like to create a port channel that spans two different Nexus 2248TP switches, and then create a couple subinterfaces on the router's po interface. I've done this successfully on my primary router, but the config doesn't seem to work on the backup router. The primary is running IOS 15, while the backup is running 12.4.25d advanced IP. I do see the trunk come up from the switch side, and my router subinterfaces and po interface show up, however I'm not able to get anywhere from the router. It's not even able to reach other hosts on the same network. As soon as I remove the port channel config and use the physical interface and assign the same address used on the port channel interface, everything works as expected and I have connectivity.
interface Port-channel21 no ip address hold-queue 150 in ! interface Port-channel21.248 encapsulation dot1Q 248 native ip address 100.100.100.1 255.255.255.0
I have been tasked to replace the existing Cat 6500 and 3750 switches by Nexus 7000 and Nexus 2000.I was told initially my boss plans to get 2 x Nexus 7000 and then eventually blow up to 4 x Nexus 7000s.For Nexus, is there a list of tasks / points that i need to consider for building the initial design?
Can i just link the Nexus 7000 like the following?
N7k-A ========= N7k-B | | lots of N2ks lots of N2ks
I just bought 2 Nexus 7000 to upgrade my primary/Production Data Center from 6509/MSFC. I'll keep the 6509E/SUP720 for the DR Data Center. I have ordered two 10Gig Wan Pipes between the Production and DR. In other words between the Nexus 7000 and the 6509E.
My problem is that i do not know the best way to do the routing between the 2 Data Centers. Currently I have MPLS with a provider connecting the 2 Data Centers using BGP on the CEs and I'm running eigrp in locally in the Cores. After the 10Gig comes to life, the MPLS will go away.
My QUESTION: Should i run ibgp between the 2 Nexus and ibgp between the 2 6509E/sup 720 AND THEN run ebgp between the Nexus and the 6509/sup 720 over the 10Gig WAN? OR should i collapse everything into one eigrp domain/AS and just run Eigrp between the Nexus and 6509E/Sup 720 over the 10Gig Wan?
I work in an organization where we recently upgraded our core switches to Nexus 7000. Everything is set up well but we still keep getting this annoying message when we log in the switch. Also the time taken to login into the switch (ssh and telnet) is longer than normal. It is not affecting the network in any way but my concern is somewhere something is wrong and it will give us trouble in the future. How to troubleshoot the cause of this error message. [code]
I am working on a DataCenter architecture where we would like to implement Nexus 7000, For the time being, there only one "context" but we may take the opportunity to implement VDC in a later future, I was not able to find a clear answer on the following :
Can we add the VDC licence & configure a new VDC on a Nexus 7000 running without VDC ? I suppose this is possible. but does it need to have the whole configuration changed or adding a VDC can be done without any interruption on the current environnement ?
We have Nexus 7000s configured for sampled netflow. We have tools that should reconstruct the sampled flow records for management displays. Most tools require the flow record, option and template to be sent in order to reconstruct the sampled flow record. We have captured some of this traffic and noticed that the template contains "SamplerMode": Unknown (1) [See Nexus 1-1.png]. Is this usual or have we not include commands required for proper operation? [code]
I am new to Cisco Nexus 7000 Series NX-OS System of appliances.I am looking for type of log events that are getting generated by CISCO Nexus 7000 switches. Need some documents which give me this references & some documents which have a log line explained.
I config LMS to manage many network devices with the same credential. However, only the Nexus 7000 fail to be archive configuration. LMS log said during telnet, the authentication fail 3 times. (I didn't use any authen server. The username and password are local. and in DCR page, i only configure " Primary Credential"l, nothing in "Auto Update Credential")Then i do a CAD check and fail also. I open the RME/CAD log, comparing with those successful log, there is one line different:[ Mon Mar 05 16:04:27 SGT 2012 ],WARN ,[main], com.cisco.nm.rmeng.inventory.cda.CdaFacade,getCdaHandlerIf, 163,CdaAG is not implemented for the device145.240.152.1 What does it mean "CdaAG is not implemented for the device?
We have ordered the following 10 line items , but only got 3 licenses , unless the 3 licenses somehow have all the licenses integrated into the 3 part numbers below, but I suspect not.
Licenses attached from Cisco:-
N7K-C7009-XL-SBUN Nexus 7009 Scalable Feature License x 1 N7K-C7009-SBUN-P1 Inc LAN,ADV,TRS,EL2,DCNM,DCNMSAN,MPLS,SAN,XL -Promotion x 1
i am trying to assign a right role for a user who authenticates to nexus 7k switch via radius. i am using cisco ISE version 1.1.1.268 and the nexus version is 5.0.2,I have created a role on nexus.
I've configured N7K to export layer 2 flows. Using 2 different flow collectors (open source and commercial), gaps/drops in the reported traffic are observed on a periodic basis.Problem doesn't seems to be with the exporters, hence I wondering if netflow configuration on N7K can be tweaked to address this symptom. Using the 'show exporter' command, no errors/drops are observed. [code]
Where to find the configuration for TCP window sizing or scaling on the nexus 7000. Also, if the Nexus 7000 handles packet traffic through-put from things like CIFS differently or does it just pass the packet straight through.
Can the Nexus 7000 provide NTP to the rest of my network? Can it be an NTP server? I have the followign ntp configuration on it, and have used the commit command, but it seems to be ignoring any NTP requests from other devices. [code]