Geschreven door Administrator woensdag 13 februari :37 - Laatst aangepast woensdag 13 februari :05

Transcription

1 Nexus 1000V returns the control of networking back to network administrators so that there is a clear boundary between server administrators and network administrators. For small businesses, one administrator may wear multiple hats so one person manages server, network, and storage. In these cases, clear separation may not be a benefit at all. The Nexus 100V still benefits as it can supply QoS, firewalling and (at a price), Security etc. For the big IT shops, story may be different. Here is separation definitely a big advantage. With Nexus 1000V, networking team can take care of the virtual networking in the same way using same commands as the physical networking. The following commands for the Nexus 1000V can be conbsidered as important to know Nx. Command Explanation 1 # configure 2 # hostname <name> 3 # svs-domain 4 # domain id 1 5 # control vlan # control vlan # exit 8 # svs connection <vcenter> 9 # protocol vmware-vim 10 # remote ip address # vmware dvs datacenter-name MY-DC 12 # connect 13 # end 14 # show svs connections 15 # show svs domain 16 # show module 17 # show system redundancy status 18 # copy run start 19 # system redundancy role primary # attach module 2 22 # show system resources 23 # exit 24 # system switchover # vlan # name vmotion/storage 1 / 5

2 28 # vlan # name Control 30 # vlan # name Packet 32 # vlan # name Production 34 # exit 35 # show vlan 36 # port-profile type Ethernet Host-Uplinks 37 # description Uplinks from ESXi hosts to switch 38 # vmware port-group VMNIC-Uplinks 39 # switchport mode trunk 40 # switchport trunk allowed vlan 1, # no shutdown 42 # system vlan 1, # state enabled 44 # exit # cli alias name wr copy running-config startup-config 47 # wr 48 # show port-profile name Host-Uplinks 49 # show interface brief 50 # show port-profile expand-interface 51 # show interface vethernet 1 status # show mac address-table vlan # interface vethernet 1 55 # shutdown 56 # no shutdown 57 # exit 58 # show interface vethernet # show version 61 # dir 62 ftp:// /nexus-1000v-kickstart-mz sv1.5.2.bin"># copy tftp://10 63 ftp:// /nexus-1000v-mz sv1.5.2.bin"># copy tftp:// # show install all impact kickstart bootflash: nexus-1000v-kickstart-mz # install all impact kickstart bootflash: nexus-1000v-kickstart-mz sv # vmware vem upgrade notify 67 # vmware vem upgrade complete 68 # configure 69 # port-profile type Ethernet Host-Uplinks 70 # channel-group auto mode on map-pinning 71 # exit 72 # show port-channel summary 73 # show port-profile name Host-Uplinks 2 / 5

3 74 75 # module vem 2 execute vemcmd show port 76 # show interface virtual # show port-profile virtual usage 79 # ip access-list ProtectVM 80 # statistics per-entry 81 # deny udp any any eq # permit ip any any 83 # show access-list 84 # show access-lists summary 85 # terminal monitor 86 # interface vethernet 1 87 # shutdown 88 # switchport port-security 89 # switchport port-security mac-address a40 90 # no shutdown 91 # show running-config interface vethernet 1 92 # no svs veth auto-config-purge 93 # show port-security address 94 # show port-security interface vethernet 1 95 # show port-security # dhcp 98 # ip dhcp snooping 99 # ip dhcp snooping vlan # port-profile Production-VMs 101 # show running-config dhcp 102 # show ip verify source 103 # show ip dhcp snooping binding 104 # no feature dhcp 105 # show running-config grep dhcp-snooping-vlan # class-map type qos RTP 108 # match ip rtp # show class-map type qos 110 # policy-map type qos VMQoS 111 # class type qos RTP 112 # set cos # set dscp ef # show policy-map type qos 116 # port-profile Production-VMs 117 # service-policy type qos input VMQoS # show run ipqos 3 / 5

4 # policy-map type qos VMQoS 122 # class type qos FTP 123 # police 1 Mbps conform transmit violate drop 124 # show policy-map VMQoS 125 # police 1 Mbps conform transmit violate set dscp dscp table pir-markdown- 126 # class-map type queuing match-all Control 127 # match protocol n1k_control 128 # policy-map type queuing CBWFQ 129 # class type queuing Control 130 # bandwidth percent # radius-server host key secretkey 133 # show radius-server 134 # aaa group server radius RadiusSG 135 # server # source-interface mgmt # use-vrf management 138 # exit 139 # show radius-server groups 140 # test aaa group RadiusSG radius dc # show aaa authentication 142 # aaa authentication login error-enable 143 # show aaa authentication login error-enable 144 # show radius-server statistics # show role 146 # show password strength-check 147 # username readonly password <a href="mailto:1234@cisco">1234@cisco # role name network-support 150 # description First Level Support 151 # rule 1 permit read 152 # rule 2 permit read-write feature ping 153 # rule 3 permit read-write feature vlan 154 # rule 4 permit read-write feature syslog 155 # show role name network-support # where # monitor session # description Local SPAN of DoubleCloudVM 161 # source interface vethernet 1 both 162 # destination interface vethernet # show monitor session # no shutdown 165 # show 4 / 5

5 # no monitor session # monitor session 2 type erspan-source 169 # description ERSPAN of DoubleCloudVM 170 # source interface vethernet 1 both 171 # destination ip # erspan-id # no shutdown 174 # show monitor session # capability l3control 177 # module vem 3 execute vemcmd show span # show port-profile virtual usage 180 # monitor session 2 type erspan-source 181 # show interface virtual grep WinServer1 At a later stage, we will explain some of the commands. 5 / 5