Cisco Nexus 3548 series User manual

Cisco Nexus 3548 Switch NX-OS System Management Configuration
Guide, Release 7.x
First Published: 2018-06-14
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:
https://www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (1721R)
©2018 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface xiii
PREFACE
Audience xiii
Document Conventions xiii
Obtaining Documentation and Submitting a Service Request xiv
Documentation Feedback xiv
Related Documentation for Cisco Nexus 3000 Series Switches xiv
New and Changed Information 1
CHAPTER 1
New and Changed Information 1
Overview 3
CHAPTER 2
System Management Features 3
Configuring PTP 7
CHAPTER 3
Information About PTP 7
PTP Device Types 8
PTP Process 9
High Availability for PTP 9
Licensing Requirements for PTP 10
Guidelines and Limitations for PTP 10
Default Settings for PTP 10
Configuring PTP 11
Configuring PTP Globally 11
Configuring PTP on an Interface 13
Configuring Multiple PTP Domains 14
Configuring PTP Grandmaster Clock 17
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
iii

Configuring PTP Cost Interface 18
Configuring clock Identity 19
Verifying the PTP Configuration 20
Configuring NTP 21
CHAPTER 4
Information About NTP 21
NTP as a Time Server 22
Distributing NTP Using CFS 22
Clock Manager 22
Virtualization Support 22
Licensing Requirements for NTP 23
Guidelines and Limitations for NTP 23
Default Settings 24
Configuring NTP 24
Configuring NTP Server and Peer 24
Configuring NTP Authentication 26
Configuring NTP Access Restrictions 27
Configuring the NTP Source IP Address 28
Configuring the NTP Source Interface 29
Configuring NTP Logging 29
Enabling CFS Distribution for NTP 30
Commiting NTP Configuration Changes 31
Discarding NTP Configuration Changes 31
Releasing the CFS Session Lock 32
Verifying the NTP Configuration 32
Configuration Examples for NTP 33
Related Documents for NTP 34
Feature History for NTP 34
Configuring System Message Logging 35
CHAPTER 5
Information About System Message Logging 35
Syslog Servers 36
Licensing Requirements for System Message Logging 36
Guidelines and Limitations for System Message Logging 36
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
iv
Contents

Default Settings for System Message Logging 36
Configuring System Message Logging 37
Configuring System Message Logging to Terminal Sessions 37
Configuring System Message Logging to a File 39
Configuring Module and Facility Messages Logging 41
Configuring Logging Timestamps 42
Configuring Syslog Servers 43
Configuring syslog on a UNIX or Linux System 45
Configuring syslog Server Configuration Distribution 46
Displaying and Clearing Log Files 47
Configuring DOM Logging 48
Enabling DOM Logging 48
Disabling DOM Logging 48
Verifying the DOM Logging Configuration 48
Verifying the System Message Logging Configuration 49
Configuring Smart Call Home 51
CHAPTER 6
Information About Smart Call Home 51
Smart Call Home Overview 52
Smart Call Home Destination Profiles 52
Smart Call Home Alert Groups 53
Smart Call Home Message Levels 54
Call Home Message Formats 55
Guidelines and Limitations for Smart Call Home 59
Prerequisites for Smart Call Home 59
Default Call Home Settings 59
Configuring Smart Call Home 60
Registering for Smart Call Home 60
Configuring Contact Information 60
Creating a Destination Profile 62
Modifying a Destination Profile 63
Associating an Alert Group with a Destination Profile 65
Adding Show Commands to an Alert Group 65
Configuring E-Mail Server Details 66
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
v
Contents

Configuring Periodic Inventory Notifications 67
Disabling Duplicate Message Throttling 68
Enabling or Disabling Smart Call Home 69
Testing the Smart Call Home Configuration 69
Verifying the Smart Call Home Configuration 70
Sample Syslog Alert Notification in Full-Text Format 70
Sample Syslog Alert Notification in XML Format 71
Configuring Session Manager 75
CHAPTER 7
Information About Session Manager 75
Guidelines and Limitations for Session Manager 75
Configuring Session Manager 76
Creating a Session 76
Configuring ACLs in a Session 76
Verifying a Session 77
Committing a Session 77
Saving a Session 77
Discarding a Session 77
Configuration Example for Session Manager 77
Verifying the Session Manager Configuration 78
Configuring the Scheduler 79
CHAPTER 8
Information About the Scheduler 79
Remote User Authentication 80
Scheduler Log Files 80
Licensing Requirements for the Scheduler 80
Guidelines and Limitations for the Scheduler 80
Default Settings for the Scheduler 81
Configuring the Scheduler 81
Enabling the Scheduler 81
Defining the Scheduler Log File Size 82
Configuring Remote User Authentication 82
Defining a Job 83
Deleting a Job 84
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
vi
Contents

Defining a Timetable 84
Clearing the Scheduler Log File 86
Disabling the Scheduler 87
Verifying the Scheduler Configuration 87
Configuration Examples for the Scheduler 88
Creating a Scheduler Job 88
Scheduling a Scheduler Job 88
Displaying the Job Schedule 88
Displaying the Results of Running Scheduler Jobs 88
Standards for the Scheduler 89
Configuring SNMP 91
CHAPTER 9
Information About SNMP 91
SNMP Functional Overview 91
SNMP Notifications 92
SNMPv3 92
Security Models and Levels for SNMPv1, v2, and v3 92
User-Based Security Model 93
CLI and SNMP User Synchronization 94
Group-Based SNMP Access 95
Licensing Requirements for SNMP 95
Guidelines and Limitations for SNMP 95
Default SNMP Settings 95
Configuring SNMP 96
Configuring SNMP Users 96
Enforcing SNMP Message Encryption 97
Assigning SNMPv3 Users to Multiple Roles 97
Creating SNMP Communities 97
Filtering SNMP Requests 97
Configuring SNMP Notification Receivers 98
Configuring SNMP Notification Receivers with VRFs 99
Filtering SNMP Notifications Based on a VRF 100
Configuring SNMP for Inband Access 101
Enabling SNMP Notifications 102
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
vii
Contents

Configuring Link Notifications 104
Disabling Link Notifications on an Interface 104
Enabling One-Time Authentication for SNMP over TCP 105
Assigning SNMP Switch Contact and Location Information 105
Configuring the Context to Network Entity Mapping 105
Disabling SNMP 106
Verifying the SNMP Configuration 106
Configuring RMON 109
CHAPTER 10
Information About RMON 109
RMON Alarms 109
RMON Events 110
Configuration Guidelines and Limitations for RMON 110
Configuring RMON 110
Configuring RMON Alarms 110
Configuring RMON Events 112
Verifying the RMON Configuration 112
Default RMON Settings 112
Configuring Online Diagnostics 115
CHAPTER 11
Information About Online Diagnostics 115
Bootup Diagnostics 115
Health Monitoring Diagnostics 116
Expansion Module Diagnostics 116
Configuring Online Diagnostics 117
Verifying the Online Diagnostics Configuration 118
Default Settings for Online Diagnostics 118
Configuring Embedded Event Manager 119
CHAPTER 12
About Embedded Event Manager 119
Embedded Event Manager Policies 120
Event Statements 120
Action Statements 121
VSH Script Policies 122
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
viii
Contents

Licensing Requirements for Embedded Event Manager 122
Prerequisites for Embedded Event Manager 122
Default Settings for Embedded Event Manager 122
Defining an Environment Variable 122
Defining a User Policy Using the CLI 123
Configuring Event Statements 124
Configuring Action Statements 127
Defining a Policy Using a VSH Script 129
Registering and Activating a VSH Script Policy 129
Overriding a System Policy 130
Configuring Syslog as an EEM Publisher 131
Configuring SPAN 133
CHAPTER 13
Information About SPAN 133
Guidelines and Limitations for SPAN 133
SPAN Sources 134
Characteristics of Source Ports 134
SPAN Destinations 134
Characteristics of Destination Ports 135
SPAN and ERSPAN Filtering 135
Guidelines and Limitations for SPAN and ERSPAN Filtering 135
SPAN and ERSPAN Control-packet Filtering 136
SPAN and ERSPAN Sampling 136
Guidelines and Limitations for SPAN and ERSPAN Sampling 137
SPAN and ERSPAN Truncation 137
Guidelines and Limitations for SPAN and ERSPAN Truncation 137
Creating or Deleting a SPAN Session 137
Configuring an Ethernet Destination Port 138
Configuring Source Ports 139
Configuring Source Port Channels or VLANs 140
Configuring the Description of a SPAN Session 140
Activating a SPAN Session 141
Suspending a SPAN Session 141
Configuring a SPAN Filter 142
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
ix
Contents

Configuring SPAN Sampling 143
Configuring SPAN Truncation 144
Displaying SPAN Information 145
Configuring ERSPAN 147
CHAPTER 14
Information About ERSPAN 147
ERSPAN Types 147
ERSPAN Sources 147
ERSPAN Destinations 148
ERSPAN Sessions 148
Multiple ERSPAN Sessions 149
ERSPAN Marker Packet 149
High Availability 149
Licensing Requirements for ERSPAN 149
Prerequisites for ERSPAN 150
Guidelines and Limitations for ERSPAN 150
Default Settings for ERSPAN 152
Configuring ERSPAN 152
Configuring an ERSPAN Source Session 152
Configuring an ERSPAN Destination Session 155
Shutting Down or Activating an ERSPAN Session 157
Configuring ERSPAN Filtering 158
Configuring ERSPAN Sampling 160
Configuring ERSPAN Truncation 161
Configuring an ERSPAN Marker Packet 163
Verifying the ERSPAN Configuration 164
Configuration Examples for ERSPAN 164
Configuration Example for an ERSPAN Source Session 164
Configuration Example for an ERSPAN Destination Session 165
Additional References 165
Related Documents 165
Configuring Warp SPAN 167
CHAPTER 15
Information About Warp SPAN 167
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
x
Contents

Guidelines and Limitations for Warp Span 168
Configuring Warp SPAN 168
Verifying Warp SPAN Mode Configuration 169
Feature History for Warp SPAN 171
Configuring DNS 173
CHAPTER 16
Information About DNS Client 173
Name Servers 173
DNS Operation 173
High Availability 174
Prerequisites for DNS Clients 174
Licensing Requirements for DNS Clients 174
Default Settings for DNS Clients 174
Configuring DNS Clients 174
Configuring Traffic Forwarding Modes 177
CHAPTER 17
Information About Warp Mode 177
Guidelines and Limitations for Warp Mode 177
Enabling and Disabling Warp Mode 178
Verifying Warp Mode Status 178
Feature History for Warp Mode 179
Configuring Active Buffer Monitoring 181
CHAPTER 18
Information About Active Buffer Monitoring 181
Active Buffer Monitoring Overview 181
Buffer Histogram Data Access and Collection 182
Configuring Active Buffer Monitoring 182
Displaying Buffer Histogram Data 183
Performing Software Maintenance Upgrades (SMUs) 189
CHAPTER 19
About SMUs 189
Package Management 190
Prerequisites for SMUs 190
Guidelines and Limitations for SMUs 190
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
xi
Contents

Performing a Software Maintenance Upgrade for Cisco NX-OS 191
Preparing for Package Installation 191
Copying the Package File to a Local Storage Device or Network Server 192
Adding and Activating Packages 193
Committing the Active Package Set 194
Deactivating and Removing Packages 194
Displaying Installation Log Information 195
Configuring Rollback 197
CHAPTER 20
Information About Rollbacks 197
Guidelines and Limitations for Rollbacks 197
Creating a Checkpoint 198
Implementing a Rollback 199
Verifying the Rollback Configuration 199
Configuring User Accounts and RBAC 201
CHAPTER 21
Information About User Accounts and RBAC 201
User Roles 201
Rules 202
User Role Policies 202
User Account Configuration Restrictions 203
User Password Requirements 203
Guidelines and Limitations for User Accounts 204
Configuring User Accounts 205
Configuring RBAC 206
Creating User Roles and Rules 206
Creating Feature Groups 207
Changing User Role Interface Policies 208
Changing User Role VLAN Policies 208
Verifying the User Accounts and RBAC Configuration 209
Configuring User Accounts Default Settings for the User Accounts and RBAC 209
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
xii
Contents

Preface
The preface contains the following sections:
•Audience, on page xiii
•Document Conventions, on page xiii
•Obtaining Documentation and Submitting a Service Request, on page xiv
•Documentation Feedback, on page xiv
•Related Documentation for Cisco Nexus 3000 Series Switches, on page xiv
Audience
This publication is for network administrators who install, configure, and maintain Cisco Nexus switches.
Document Conventions
Command descriptions use the following conventions:
DescriptionConvention
Bold text indicates the commands and keywords that you enter literally
as shown.
bold
Italic text indicates arguments for which the user supplies the values.
Italic
Square brackets enclose an optional element (keyword or argument).[x]
Square brackets enclosing keywords or arguments separated by a vertical
bar indicate an optional choice.
[x | y]
Braces enclosing keywords or arguments separated by a vertical bar
indicate a required choice.
{x | y}
Nested set of square brackets or braces indicate optional or required
choices within optional or required elements. Braces and a vertical bar
within square brackets indicate a required choice within an optional
element.
[x {y | z}]
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
xiii

DescriptionConvention
Indicates a variable for which you supply values, in context where italics
cannot be used.
variable
A nonquoted set of characters. Do not use quotation marks around the
string or the string will include the quotation marks.
string
Examples use the following conventions:
DescriptionConvention
Terminal sessions and information the switch displays are in screen font.screen font
Information you must enter is in boldface screen font.boldface screen font
Arguments for which you supply values are in italic screen font.
italic screen font
Nonprinting characters, such as passwords, are in angle brackets.< >
Default responses to system prompts are in square brackets.[ ]
An exclamation point (!) or a pound sign (#) at the beginning of a line
of code indicates a comment line.
!, #
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service
request, and gathering additional information, see What's New in Cisco Product Documentation at:
http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html.
Subscribe to What's New in Cisco Product Documentation, which lists all new and revised Cisco technical
documentation as an RSS feed and delivers content directly to your desktop using a reader application. The
RSS feeds are a free service.
Documentation Feedback
To provide technical feedback on this document, or to report an error or omission, please send your comments
to [email protected]. We appreciate your feedback.
Related Documentation for Cisco Nexus 3000 Series Switches
The entire Cisco Nexus 3000 Series switch documentation set is available at the following URL:
https://www.cisco.com/c/en/us/support/switches/nexus-3000-series-switches/
tsd-products-support-series-home.html
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
xiv
Preface
Obtaining Documentation and Submitting a Service Request

CHAPTER 1
New and Changed Information
This chapter contains the following sections:
•New and Changed Information, on page 1
New and Changed Information
The following table provides an overview of the significant changes to this guide for this current release. The
table does not provide an exhaustive list of all changes made to the configuration guides or of the new features
in this release.
Table 1: New and Changed Features
Where DocumentedAdded or
Changed in
Release
DescriptionFeature
Not applicableNot applicableFirst 7.x release.No updates since Cisco NX-OS
Release 6.x
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
1

Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
2
New and Changed Information
New and Changed Information

CHAPTER 2
Overview
This chapter contains the following sections:
•System Management Features, on page 3
System Management Features
The system management features documented in this guide are described below:
DescriptionFeature
The Active Buffer Monitoring feature provides
detailed buffer occupancy data to help you detect
network congestion, review past events to understand
when and how network congestion is affecting
network operations, understand historical trending,
and identify patterns of application traffic flow.
Active Buffer Monitoring
In warp mode, the access path is shortened by
consolidating the forwarding table into single table,
resulting in faster processing of frames and packets.
In warp mode, latency is reduced by up to 20 percent.
Warp Mode
User accounts and role-based access control (RBAC)
allow you to define the rules for an assigned role.
Roles restrict the authorization that the user has to
access management operations. Each user role can
contain multiple rules and each user can have multiple
roles.
User Accounts and RBAC
Session Manager allows you to create a configuration
and apply it in batch mode after the configuration is
reviewed and verified for accuracy and completeness.
Session Manager
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
3

DescriptionFeature
Cisco Generic Online Diagnostics (GOLD) define a
common framework for diagnostic operations across
Cisco platforms. The online diagnostic framework
specifies the platform-independent fault-detection
architecture for centralized and distributed systems,
including the common diagnostics CLI and the
platform-independent fault-detection procedures for
boot-up and run-time diagnostics.
The platform-specific diagnostics provide
hardware-specific fault-detection tests and allow you
to take appropriate corrective action in response to
diagnostic test results.
Online Diagnostics
You can use system message logging to control the
destination and to filter the severity level of messages
that system processes generate. You can configure
logging to a terminal session, a log file, and syslog
servers on remote systems.
System message logging is based on RFC 3164. For
more information about the system message format
and the messages that the device generates, see the
Cisco NX-OS System Messages Reference.
System Message Logging
Call Home provides an e-mail-based notification of
critical system policies. Cisco NX-OS provides a
range of message formats for optimal compatibility
with pager services, standard e-mail, or XML-based
automated parsing applications. You can use this
feature to page a network support engineer, e-mail a
Network Operations Center, or use Cisco Smart Call
Home services to automatically generate a case with
the Technical Assistance Center.
Smart Call Home
The configuration rollback feature allows users to
take a snapshot, or user checkpoint, of the Cisco
NX-OS configuration and then reapply that
configuration to a switch at any point without having
to reload the switch. A rollback allows any authorized
administrator to apply this checkpoint configuration
without requiring expert knowledge of the features
configured in the checkpoint.
Configuration Rollback
The Simple Network Management Protocol (SNMP)
is an application-layer protocol that provides a
message format for communication between SNMP
managers and agents. SNMP provides a standardized
framework and a common language used for the
monitoring and management of devices in a network.
SNMP
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
4
Overview
System Management Features

DescriptionFeature
RMON is an Internet Engineering Task Force (IETF)
standard monitoring specification that allows various
network agents and console systems to exchange
network monitoring data. Cisco NX-OS supports
RMON alarms, events, and logs to monitor Cisco
NX-OS devices.
RMON
The Switched Port Analyzer (SPAN) feature
(sometimes called port mirroring or port monitoring)
selects network traffic for analysis by a network
analyzer. The network analyzer can be a Cisco
SwitchProbe, a Fibre Channel Analyzer, or other
Remote Monitoring (RMON) probes.
SPAN
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
5
Overview
System Management Features

Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
6
Overview
System Management Features