NX-OS and Cisco Nexus Switching
Cisco Press (Verlag)
978-1-58705-892-9 (ISBN)
- Titel erscheint in neuer Auflage
- Artikel merken
Next-Generation Data Center Architectures
The complete guide to planning, configuring, managing, and troubleshooting NX-OS in enterprise environments
Kevin Corbin, CCIE® No. 11577
Ron Fuller, CCIE No. 5851
David Jansen, CCIE No. 5952
Cisco® Nexus switches and the new NX-OS operating system are rapidly becoming the new de facto standards for data center distribution/aggregation layer networking. NX-OS builds on Cisco IOS to provide advanced features that will be increasingly crucial to efficient data center operations. NX-OS and Cisco Nexus Switching is the definitive guide to utilizing these powerful new capabilities in enterprise environments.
In this book, three Cisco consultants cover every facet of deploying, configuring, operating, and troubleshooting NX-OS in the data center. They review the key NX-OS enhancements for high availability, virtualization, In-Service Software Upgrades (ISSU), and security. In this book, you will discover support and configuration best practices for working with Layer 2 and Layer 3 protocols and networks, implementing multicasting, maximizing serviceability, providing consistent network and storage services, and much more.
The authors present multiple command-line interface (CLI) commands, screen captures, realistic configurations, and troubleshooting tips—all based on their extensive experience working with customers who have successfully deployed Nexus switches in their data centers.
Kevin Corbin, CCIE® No. 11577, is a Technical Solutions Architect for Cisco, specializing in data center technologies. Kevin works with enterprise customers to help them develop their next-generation data center architectures. Kevin has more than 14 years of server and networking experiencing including routing, switching, security, and content networking.
Ron Fuller, CCIE No. 5851 (Routing and Switching/Storage Networking), is a Technical Solution Architect for Cisco with 19 years of experience in the industry. His focus is working with enterprise customers to address their challenges with comprehensive end-to-end data center architectures.
David Jansen, CCIE No. 5952, is a Technical Solutions Architect for Cisco’s U.S. Enterprise Segment, where he works with enterprise customers to address end-to-end data center architectures. David has more than 20 years experience in the information technology industry.
Learn how Cisco NX-OS builds on and differs from IOS
Work with NX-OS user modes, management interfaces, and system files
Configure Layer 2 networking: VLANs/private VLANs, STP, virtual port channels, and unidirectional link detection
Configure Layer 3 EIGRP, OSPF, BGP, and First Hop Redundancy Protocols (FHRPs)
Set up IP multicasting with PIM, IGMP, and MSDP
Secure NX-OS with SSH, Cisco TrustSec, ACLs, port security, DHCP snooping, Dynamic ARP inspection, IP Source Guard, keychains, Traffic Storm Control, and more
Build high availability networks using process modularity and restart, stateful switchover, nonstop forwarding, and in-service software upgrades
Utilize NX-OS embedded serviceability, including Switched Port Analyzer (SPAN), Smart Call Home, Configuration Checkpoint/Rollback, and NetFlow
Use the NX-OS Unified Fabric to simplify infrastructure and provide ubiquitous network and storage services
Run NX-OS on Nexus 1000V server-based software switches
This book is part of the Networking Technology Series from Cisco Press®, which offers networking professionals valuable information for constructing efficient networks, understanding new technologies, and building successful careers.
Kevin Corbin, CCIE No. 11577 , is a technology solutions architect with Cisco. In this role for three years, Kevin works with Enterprise customers to help them develop their next-generation data center architectures. Kevin has more than 14 years of server and networking experiencing including routing, switching, security, and content networking. Kevin has also held multiple certifications from Microsoft, Citrix, HP, Novell, and VMWare. Prior to joining Cisco, Kevin worked for many large enterprises and most recently in a consulting capacity for large enterprise customers. Ron Fuller, CCIE No. 5851 (Routing and Switching/Storage Networking), is a technical solutions architect for Cisco specializing in data center architectures. He has 19 years of experience in the industry and has held certifications from Novell, HP, Microsoft, ISC2, SNIA, and Cisco. His focus is working with Enterprise customers to address their challenges with comprehensive end-to-end data center architectures. He lives in Ohio with his wife and three wonderful children and enjoys travel and auto racing. David Jansen, CCIE No. 5952, is a technical solutions architect for Data Center for Central Area. David has more than 20 years experience in the information technology industry. He has held multiple certifications from Microsoft, Novell, Checkpoint, and Cisco. His focus is to work with Enterprise customers to address end-to-end data center Enterprise architectures. David has been with Cisco for 12 years and working as a Technical Solutions Architect for 4 years and has provided unique experiences helping customers build architectures for Enterprise data centers. David has also been instrumental in developing data center interconnect solutions to address L2 requirements between multiple data centers to meet application clusters and virtualization requirements. David has been presenting data center interconnect at Cisco Live for 3 years. David holds a B.S.E. degree in computer science from the University of Michigan (Go Blue!) and an M.A. degree in adult education from Central Michigan University. About the Technical Reviewers Phil Davis, CCIE No. 2021, is a technical solutions architect with Cisco, specializing in routing and switching and data center technologies. Phil has been with Cisco for more than 10 years and has more than 17 years of experience in the industry. Phil currently uses his expertise with Enterprise customers designing their data center and multiprotocol network architectures. Phil holds multiple certifications, including VMware’s VCP, and is often presenting on many of today’s top technologies. Phil lives near Cincinnati, Ohio, with his wife and two children. Eric Murray is a network engineer for a large healthcare company. He has more than 15 years experience with designing, implementing, and maintaining Cisco Enterprise networks in the fast-paced healthcare and manufacturing industries. Eric has implemented several Nexus data center network designs and migrations and is a subject matter expert in utilizing Nexus 7000, 5000, and 2000 series switches. Eric is currently involved with designing, testing, implementing, and providing technical support for a Cisco Unified Communications solution. Eric also has extensive experience in multiprotocol WAN and data center LAN environments utilizing Cisco switching and routing platforms.
Foreword xiv
Introduction xv
Chapter 1 Introduction to Cisco NX-OS 1
NX-OS Overview 1
NX-OS Supported Platforms 3
Cisco NX-OS and Cisco IOS Comparison 3
NX-OS User Modes 5
EXEC Command Mode 6
Global Configuration Command Mode 6
Interface Configuration Command Mode 7
Management Interfaces 8
Controller Processor (Supervisor Module) 8
Connectivity Management Processor (CMP) 9
Telnet 11
SSH 12
XML 14
SNMP 14
DCNM 19
Managing System Files 20
File Systems 21
Configuration Files: Configuration Rollback 25
Operating System Files 27
Virtual Device Contexts (VDCs) 28
VDC Configuration 29
Troubleshooting 33
show Commands 33
debug Commands 34
Topology 34
Further Reading 35
Chapter 2 Layer 2 Support and Configurations 37
Layer 2 Overview 37
Store-and-Forward Switching 38
Cut-Through Switching 38
Fabric Extension via the Nexus 2000 38
Configuring Nexus 2000 Using Static Pinning 39
Nexus 2000 Static Pinning Verification 41
Configuring Nexus 2000 Using Port-Channels 45
Nexus 2000 Static Pinning Verification 46
L2 Forwarding Verification 48
Layer 2 Forwarding on a Nexus 7000 48
VLANs 50
Configuring VLANs 50
VLAN Trunking Protocol 51
Assigning VLAN Membership 52
Verifying VLAN Configuration 53
Private VLANs 54
Configuring PVLANs 55
Verifying PVLAN Configuration 58
Spanning Tree Protocol 59
Rapid-PVST+ Configuration 60
MST Configuration 65
Additional Spanning-Tree Configuration 69
Spanning-Tree Toolkit 72
Spanning-Tree Port Types 77
Configuring Layer 2 Interfaces 78
Virtualization Hosts 78
Virtual Port Channels 87
VPC Peer-Gateway 94
Unidirectional Link Detection 94
Summary 96
Chapter 3 Layer 3 Support and Configurations 97
EIGRP 97
EIGRP Operation 98
Configuring EIGRP 99
EIGRP Summarization 103
EIGRP Stub Routing 106
Securing EIGRP 107
EIGRP Redistribution 109
OSPF 114
OSPFv2 Configuration 114
OSPF Summarization 120
OSPF Stub Routing 123
Securing OSPF 127
OSPF Redistribution 129
BGP 137
BGP Configuration 137
BGP Neighbors 141
Securing BGP 144
BGP Peer Templates 146
Advertising BGP Networks 148
Modifying BGP Routing Metrics 150
Verifying BGP-Specific Configuration 151
First Hop Redundancy Protocols (FHRP) 152
HSRP 152
VRRP 158
GLBP 163
Summary 170
Chapter 4 IP Multicast Configuration 171
Multicast Operation 171
Multicast Distribution Trees 172
Reverse Path Forwarding 174
Protocol Independent Multicast (PIM) 174
RPs 176
PIM Configuration on Nexus 7000 177
Configuring Static RPs 180
Configuring BSRs 182
Configuring Auto-RP 184
Configuring Anycast-RP 186
Configuring SSM and Static RPF 188
IGMP Operation 189
IGMP Configuration on Nexus 7000 190
IGMP Configuration on Nexus 5000 194
IGMP Configuration on Nexus 1000V 195
MSDP Configuration on Nexus 7000 197
Summary 199
Chapter 5 Security 201
Configuring RADIUS 202
RADIUS Configuration Distribution 205
Configuring TACACS+ 211
Enabling TACACS+ 212
Configuring SSH 221
Configuring Cisco TrustSec 224
Layer 2 Solutions Between Data Centers 231
Configuring IP ACLs 232
Configuring MAC ACLs 234
Configuring VLAN ACLs 236
Configuring Port Security 237
Security Violations and Actions 240
Configuring DHCP Snooping 242
Configuring Dynamic ARP Inspection 246
Dynamic ARP Inspection Trust State 247
Configuring IP Source Guard 250
Configuring Keychain Management 252
Configuring Traffic Storm Control 253
Configuring Unicast RPF 255
Configuring Control Plane Policing 257
Configuring Rate Limits 266
SNMPv3 271
Summary 278
Chapter 6 High Availability 279
Physical Redundancy 279
Redundant Power Supplies 280
Redundant Cooling System 282
Redundant Supervisors 285
Redundant Ethernet Out-of-Band (EOBC) 286
Redundant Fabric Modules 286
Generic Online Diagnostics 287
Bootup Diagnostics 288
Runtime Diagnostics 289
On-Demand Diagnostics 294
NX-OS High-Availability Architecture 295
Process Modularity 295
Process Restart 297
Stateful Switchover 297
Nonstop Forwarding 299
In-Service Software Upgrades 299
Summary 309
Chapter 7 Embedded Serviceability Features 311
SPAN 311
SPAN on Nexus 7000 312
Configuring SPAN on Nexus 7000 313
SPAN on Nexus 5000 318
Configuring SPAN on Nexus 5000 319
SPAN on Nexus 1000V 323
Configuring SPAN on Nexus 1000V 324
ERSPAN on Nexus 1000V 326
Embedded Analyzer 331
Smart Call Home 342
Smart Call Home Configuration 347
Configuration Checkpoint and Rollback 350
Checkpoint Creation and Rollback 351
NetFlow 353
Configuring NetFlow on Nexus 7000 354
Configuring NetFlow on Nexus 1000V 357
Summary 360
Chapter 8 Unified Fabric 361
Unified Fabric Overview 361
Enabling Technologies 362
10-Gigabit Ethernet 362
Fibre Channel over Ethernet 364
Nexus 5000 Unified Fabric Configuration 364
N-Port Virtualization (NPV) 367
N-Port Identification Virtualization 368
FCoE Configuration 369
Summary 373
Chapter 9 Nexus 1000V 375
Hypervisor and vSphere Introduction 375
Nexus 1000V System Overview 376
Nexus 1000V Switching Overview 379
Nexus 1000V Manual Installation 382
Nexus 1000V VSM Installation 382
Nexus 1000V GUI Installation 399
Creating the Uplink Profile 405
Adding the VEM to a ESX vSphere 4 Host 406
Enabling the Telnet Server Process 414
Changing the VSM Hostname 414
Layer 3 Control 414
VSM High Availability: Adding a Secondary VSM 421
Nexus 1000V Port Profiles 429
Summary 439
Index 440
| Erscheint lt. Verlag | 24.6.2010 |
|---|---|
| Verlagsort | Indianapolis |
| Sprache | englisch |
| Maße | 229 x 189 mm |
| Gewicht | 774 g |
| Themenwelt | Mathematik / Informatik ► Informatik ► Betriebssysteme / Server |
| Mathematik / Informatik ► Informatik ► Netzwerke | |
| ISBN-10 | 1-58705-892-8 / 1587058928 |
| ISBN-13 | 978-1-58705-892-9 / 9781587058929 |
| Zustand | Neuware |
| Haben Sie eine Frage zum Produkt? |
aus dem Bereich
