Nexus 1000V returns the control of networking back to network administrators so that there is a clear boundary between server administrators and network administrators. For small businesses, one administrator may wear multiple hats so one person manages server, network, and storage. In these cases, clear separation may not be a benefit at all. The Nexus 100V still benefits as it can supply QoS, firewalling and (at a price), Security etc. For the big IT shops, story may be different. Here is separation definitely a big advantage. With Nexus 1000V, networking team can take care of the virtual networking in the same way using same commands as the physical networking. The following commands for the Nexus 1000V can be conbsidered as important to know Nx. Command Explanation 1 # configure 2 # hostname <name> 3 # svs-domain 4 # domain id 1 5 # control vlan 102 6 # control vlan 103 7 # exit 8 # svs connection <vcenter> 9 # protocol vmware-vim 10 # remote ip address 100.0.1.21 11 # vmware dvs datacenter-name MY-DC 12 # connect 13 # end 14 # show svs connections 15 # show svs domain 16 # show module 17 # show system redundancy status 18 # copy run start 19 # system redundancy role primary 20 21 # attach module 2 22 # show system resources 23 # exit 24 # system switchover 25 26 # vlan 101 27 # name vmotion/storage 1 / 5
28 # vlan 102 29 # name Control 30 # vlan 103 31 # name Packet 32 # vlan 104 33 # name Production 34 # exit 35 # show vlan 36 # port-profile type Ethernet Host-Uplinks 37 # description Uplinks from ESXi hosts to switch 38 # vmware port-group VMNIC-Uplinks 39 # switchport mode trunk 40 # switchport trunk allowed vlan 1, 101-104 41 # no shutdown 42 # system vlan 1, 102-103 43 # state enabled 44 # exit 45 46 # cli alias name wr copy running-config startup-config 47 # wr 48 # show port-profile name Host-Uplinks 49 # show interface brief 50 # show port-profile expand-interface 51 # show interface vethernet 1 status 52 53 # show mac address-table vlan 104 54 # interface vethernet 1 55 # shutdown 56 # no shutdown 57 # exit 58 # show interface vethernet 1 59 60 # show version 61 # dir 62 ftp://100.0.1.21/nexus-1000v-kickstart-mz.4.2.1.sv1.5.2.bin"># copy tftp://10 63 ftp://100.0.1.21/nexus-1000v-mz.4.2.1.sv1.5.2.bin"># copy tftp://100.0.1.21 64 # show install all impact kickstart bootflash: nexus-1000v-kickstart-mz.4.2.1. 65 # install all impact kickstart bootflash: nexus-1000v-kickstart-mz.4.2.1.sv1.5 66 # vmware vem upgrade notify 67 # vmware vem upgrade complete 68 # configure 69 # port-profile type Ethernet Host-Uplinks 70 # channel-group auto mode on map-pinning 71 # exit 72 # show port-channel summary 73 # show port-profile name Host-Uplinks 2 / 5
74 75 # module vem 2 execute vemcmd show port 76 # show interface virtual 77 78 # show port-profile virtual usage 79 # ip access-list ProtectVM 80 # statistics per-entry 81 # deny udp any any eq 123 82 # permit ip any any 83 # show access-list 84 # show access-lists summary 85 # terminal monitor 86 # interface vethernet 1 87 # shutdown 88 # switchport port-security 89 # switchport port-security mac-address 0050.5687.5a40 90 # no shutdown 91 # show running-config interface vethernet 1 92 # no svs veth auto-config-purge 93 # show port-security address 94 # show port-security interface vethernet 1 95 # show port-security 96 97 # dhcp 98 # ip dhcp snooping 99 # ip dhcp snooping vlan 104 100 # port-profile Production-VMs 101 # show running-config dhcp 102 # show ip verify source 103 # show ip dhcp snooping binding 104 # no feature dhcp 105 # show running-config grep dhcp-snooping-vlan 106 107 # class-map type qos RTP 108 # match ip rtp 16384-32767 109 # show class-map type qos 110 # policy-map type qos VMQoS 111 # class type qos RTP 112 # set cos 5 113 # set dscp ef 114 115 # show policy-map type qos 116 # port-profile Production-VMs 117 # service-policy type qos input VMQoS 118 119 # show run ipqos 3 / 5
120 121 # policy-map type qos VMQoS 122 # class type qos FTP 123 # police 1 Mbps conform transmit violate drop 124 # show policy-map VMQoS 125 # police 1 Mbps conform transmit violate set dscp dscp table pir-markdown- 126 # class-map type queuing match-all Control 127 # match protocol n1k_control 128 # policy-map type queuing CBWFQ 129 # class type queuing Control 130 # bandwidth percent 5 131 132 # radius-server host 100.0.1.21 key secretkey 133 # show radius-server 134 # aaa group server radius RadiusSG 135 # server 100.0.1.21 136 # source-interface mgmt 0 137 # use-vrf management 138 # exit 139 # show radius-server groups 140 # test aaa group RadiusSG radius dc123 141 # show aaa authentication 142 # aaa authentication login error-enable 143 # show aaa authentication login error-enable 144 # show radius-server statistics 100.0.1.21 145 # show role 146 # show password strength-check 147 # username readonly password <a href="mailto:1234@cisco">1234@cisco 148 149 # role name network-support 150 # description First Level Support 151 # rule 1 permit read 152 # rule 2 permit read-write feature ping 153 # rule 3 permit read-write feature vlan 154 # rule 4 permit read-write feature syslog 155 # show role name network-support 156 157 # where 158 159 # monitor session 1 160 # description Local SPAN of DoubleCloudVM 161 # source interface vethernet 1 both 162 # destination interface vethernet 9 163 # show monitor session 1 164 # no shutdown 165 # show 4 / 5
166 167 # no monitor session 1 168 # monitor session 2 type erspan-source 169 # description ERSPAN of DoubleCloudVM 170 # source interface vethernet 1 both 171 # destination ip 100.0.14.3 172 # erspan-id 1 173 # no shutdown 174 # show monitor session 2 175 176 # capability l3control 177 # module vem 3 execute vemcmd show span 178 179 # show port-profile virtual usage 180 # monitor session 2 type erspan-source 181 # show interface virtual grep WinServer1 At a later stage, we will explain some of the commands. 5 / 5