Cisco Nexus 5000 Series User manual

Cisco Nexus 5000 Series NX-OS System Management Configuration
Guide, Release 5.2(1)N1(1)
First Published: July 02, 2012
Last Modified: July 02, 2012
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown
for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
©Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface Preface xiii
Audience xiii
Document Conventions xiii
Related Documentation xiv
Documentation Feedback xvi
Obtaining Documentation and Submitting a Service Request xvii
CHAPTER 1 New and Changed Information 1
New and Changed Information for this Release 1
CHAPTER 2 Overview 3
System Management Features 3
CHAPTER 3 Configuring Switch Profiles 7
Information About Switch Profiles 8
Switch Profile Configuration Modes 8
Configuration Validation 9
Software Upgrades and Downgrades With Switch Profiles 10
Prerequisites for Switch Profiles 10
Guidelines and Limitations for Switch Profiles 10
Configuring Switch Profiles 12
Adding a Switch to a Switch Profile 13
Adding or Modifying Switch Profile Commands 15
Importing a Switch Profile 17
Importing Configurations in a vPC Topology 19
Verifying Commands in a Switch Profile 19
Isolating a Peer Switch 20
Cisco Nexus 5000 Series NX-OS System Management Configuration Guide, Release 5.2(1)N1(1)
iii

Deleting a Switch Profile 20
Deleting a Switch from a Switch Profile 21
Displaying the Switch Profile Buffer 22
Synchronizing Configurations After Switch Reboot 23
Switch Profile Configuration show Commands 23
Configuration Examples for Switch Profiles 24
Creating a Switch Profile on a Local and Peer Switch Example 24
Verifying the Synchronization Status Example 26
Displaying the Running Configuration 27
Displaying the Switch Profile Synchronization Between Local and Peer Switches 27
Displaying Verify and Commit on Local and Peer Switches 28
Successful and Unsuccessful Synchronization Examples 29
Configuring the Switch Profile Buffer, Buffer Move, and Deleting the Buffer 29
Importing Configurations 30
Sample Migrations Using the Import Command 33
Migrating Cisco NX-OS Release 5.0(2)N1(1) in a Fabric Extender A-A Topology
Example 33
Migrating Cisco NX-OS Release 5.0(2)N1(1) in a Fabric Extender Fabric Extender
Straight-Through Topology Example 33
CHAPTER 4 Configuring Module Pre-Provisioning 35
Information About Module Pre-Provisioning 35
Guidelines and Limitations 36
Enabling Module Pre-Provisioning 36
Removing Module Pre-Provisioning 37
Verifying the Pre-Provisioned Configuration 38
Configuration Examples for Pre-Provisioning 38
CHAPTER 5 Using Cisco Fabric Services 41
Information About CFS 41
CFS Distribution 42
CFS Distribution Modes 42
Uncoordinated Distribution 42
Coordinated Distribution 43
Unrestricted Uncoordinated Distributions 43
Cisco Nexus 5000 Series NX-OS System Management Configuration Guide, Release 5.2(1)N1(1)
iv
Contents

Disabling or Enabling CFS Distribution on a Switch 43
Verifying the CFS Distribution Status 44
CFS Distribution over IP 44
CFS Distribution over Fibre Channel 45
CFS Distribution Scopes 45
CFS Merge Support 46
CFS Support for Applications 46
CFS Application Requirements 46
Enabling CFS for an Application 47
Verifying Application Registration Status 47
Locking the Network 48
Verifying CFS Lock Status 48
Committing Changes 48
Discarding Changes 49
Saving the Configuration 49
Clearing a Locked Session 49
CFS Regions 49
About CFS Regions 49
Example Scenario 50
Managing CFS Regions 50
Creating CFS Regions 50
Assigning Applications to CFS Regions 50
Moving an Application to a Different CFS Region 51
Removing an Application from a Region 52
Deleting CFS Regions 52
Configuring CFS over IP 52
Enabling CFS over IPv4 52
Enabling CFS over IPv6 53
Verifying the CFS Over IP Configuration 53
Configuring IP Multicast Address for CFS over IP 54
Configuring IPv4 Multicast Address for CFS 54
Configuring IPv6 Multicast Address for CFS 54
Verifying the IP Multicast Address Configuration for CFS over IP 55
Displaying CFS Distribution Information 55
Default Settings for CFS 57
Cisco Nexus 5000 Series NX-OS System Management Configuration Guide, Release 5.2(1)N1(1)
v
Contents

CHAPTER 6 Configuring PTP 59
Information About PTP 59
PTP Device Types 60
PTP Process 60
Clock Management 61
High Availability for PTP 61
Licensing Requirements for PTP 61
Guidelines and Limitations for PTP 61
Default Settings for PTP 62
Configuring PTP 62
Configuring PTP Globally 62
Configuring PTP on an Interface 64
Verifying the PTP Configuration 66
CHAPTER 7 Configuring User Accounts and RBAC 67
Information About User Accounts and RBAC 67
User Roles 67
Predefined SAN Admin User Role 68
Rules 69
SAN Admin Role-Feature Rule Mapping 69
User Role Policies 71
User Account Configuration Restrictions 72
User Password Requirements 72
Guidelines and Limitations for User Accounts 73
Configuring User Accounts 74
Configuring SAN Admin Users 75
Configuring RBAC 76
Creating User Roles and Rules 76
Creating Feature Groups 77
Changing User Role Interface Policies 78
Changing User Role VLAN Policies 78
Changing User Role VSAN Policies 79
Verifying the User Accounts and RBAC Configuration 80
Configuring User Accounts Default Settings for the User Accounts and RBAC 80
Cisco Nexus 5000 Series NX-OS System Management Configuration Guide, Release 5.2(1)N1(1)
vi
Contents

CHAPTER 8 Configuring Session Manager 83
Information About Session Manager 83
Guidelines and Limitations for Session Manager 83
Configuring Session Manager 84
Creating a Session 84
Configuring ACLs in a Session 84
Verifying a Session 85
Committing a Session 85
Saving a Session 85
Discarding a Session 85
Configuration Example for Session Manager 86
Verifying the Session Manager Configuration 86
CHAPTER 9 Configuring Online Diagnostics 87
Information About Online Diagnostics 87
Bootup Diagnostics 87
Health Monitoring Diagnostics 88
Expansion Module Diagnostics 89
Configuring Online Diagnostics 90
Verifying the Online Diagnostics Configuration 90
Default Settings for Online Diagnostics 90
CHAPTER 10 Configuring System Message Logging 93
Information About System Message Logging 93
Syslog Servers 94
Licensing Requirements for System Message Logging 94
Guidelines and Limitations for System Message Logging 94
Default Settings for System Message Logging 95
Configuring System Message Logging 95
Configuring System Message Logging to Terminal Sessions 95
Configuring System Message Logging to a File 97
Configuring Module and Facility Messages Logging 98
Configuring Logging Timestamps 100
Configuring the ACL Logging Cache 101
Cisco Nexus 5000 Series NX-OS System Management Configuration Guide, Release 5.2(1)N1(1)
vii
Contents

Applying ACL Logging to an Interface 101
Configuring the ACL Log Match Level 102
Configuring Syslog Servers 103
Configuring syslog on a UNIX or Linux System 104
Configuring syslog Server Configuration Distribution 105
Displaying and Clearing Log Files 106
Verifying the System Message Logging Configuration 107
CHAPTER 11 Configuring Smart Call Home 109
Information About Smart Call Home 109
Smart Call Home Overview 110
Smart Call Home Destination Profiles 110
Smart Call Home Alert Groups 111
Smart Call Home Message Levels 112
Call Home Message Formats 113
Guidelines and Limitations for Smart Call Home 118
Prerequisites for Smart Call Home 118
Default Call Home Settings 119
Configuring Smart Call Home 119
Registering for Smart Call Home 119
Configuring Contact Information 120
Creating a Destination Profile 121
Modifying a Destination Profile 122
Associating an Alert Group with a Destination Profile 124
Adding Show Commands to an Alert Group 124
Configuring E-Mail Server Details 125
Configuring Periodic Inventory Notifications 126
Disabling Duplicate Message Throttling 127
Enabling or Disabling Smart Call Home 128
Testing the Smart Call Home Configuration 128
Verifying the Smart Call Home Configuration 129
Sample Syslog Alert Notification in Full-Text Format 130
Sample Syslog Alert Notification in XML Format 130
CHAPTER 12 Configuring Rollback 135
Cisco Nexus 5000 Series NX-OS System Management Configuration Guide, Release 5.2(1)N1(1)
viii
Contents

Information About Rollback 135
Guidelines and Limitations 135
Creating a Checkpoint 136
Implementing a Rollback 137
Verifying the Rollback Configuration 137
CHAPTER 13 Configuring DNS 139
DNS Client Overview 139
Name Servers 139
DNS Operation 140
High Availability 140
Prerequisites for DNS Clients 140
Licensing Requirements for DNS Clients 140
Default Settings 140
Configuring DNS Clients 141
CHAPTER 14 Configuring SNMP 143
Information About SNMP 143
SNMP Functional Overview 143
SNMP Notifications 144
SNMPv3 144
Security Models and Levels for SNMPv1, v2, v3 145
User-Based Security Model 146
CLI and SNMP User Synchronization 147
Group-Based SNMP Access 147
Licensing Requirements for SNMP 147
Guidelines and Limitations for SNMP 148
Default SNMP Settings 148
Configuring SNMP 148
Configuring SNMP Users 148
Enforcing SNMP Message Encryption 149
Assigning SNMPv3 Users to Multiple Roles 149
Creating SNMP Communities 150
Filtering SNMP Requests 150
Configuring SNMP Notification Receivers 151
Cisco Nexus 5000 Series NX-OS System Management Configuration Guide, Release 5.2(1)N1(1)
ix
Contents

Configuring SNMP Notification Receivers with VRFs 152
Filtering SNMP Notifications Based on a VRF 153
Configuring a Source Interface for Sending Out All SNMP Notifications 153
Configuring a Host Receiver for SNMP Notifications 154
Configuring SNMP for Inband Access 155
Enabling SNMP Notifications 156
Configuring Link Notifications 158
Disabling Link Notifications on an Interface 159
Enabling One-Time Authentication for SNMP over TCP 159
Assigning SNMP Switch Contact and Location Information 159
Configuring the Context to Network Entity Mapping 160
Disabling SNMP 160
Verifying SNMP Configuration 161
Feature History for SNMP 161
CHAPTER 15 Configuring RMON 163
Information About RMON 163
RMON Alarms 163
RMON Events 164
Configuration Guidelines and Limitations for RMON 164
Configuring RMON 165
Configuring RMON Alarms 165
Configuring RMON Events 166
Verifying RMON Configuration 166
Default RMON Settings 166
CHAPTER 16 Configuring SPAN 169
Information About SPAN 169
SPAN Sources 170
Characteristics of Source Ports 170
SPAN Destinations 171
Characteristics of Destination Ports 171
Guidelines and Limitations for SPAN 171
Creating or Deleting a SPAN Session 172
Configuring an Ethernet Destination Port 172
Cisco Nexus 5000 Series NX-OS System Management Configuration Guide, Release 5.2(1)N1(1)
x
Contents