Cisco Nexus 6000 User manual

Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide,
Release 6.x
First Published: 2013-01-30
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Text Part Number: OL-27932-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
©2013 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface Preface xv
Audience xv
Document Conventions xv
Related Documentation for Cisco Nexus 6000 Series NX-OS Software xvii
Documentation Feedback xviii
Obtaining Documentation and Submitting a Service Request xix
CHAPTER 1 Overview 1
SAN Switching Overview 1
CHAPTER 2 Configuring Fibre Channel Domain Parameters 5
Information About Domain Parameters 5
Fibre Channel Domains 5
Domain Restarts 6
Restarting a Domain 7
Domain Manager Fast Restart 7
Enabling Domain Manager Fast Restart 7
Switch Priority 8
Configuring Switch Priority 8
About fcdomain Initiation 9
Disabling or Reenabling fcdomains 9
Configuring Fabric Names 9
Incoming RCFs 10
Rejecting Incoming RCFs 10
Autoreconfiguring Merged Fabrics 11
Enabling Autoreconfiguration 11
Domain IDs 12
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
OL-27932-01 iii

Domain IDs - Guidelines 12
Configuring Static or Preferred Domain IDs 14
Allowed Domain ID Lists 15
Configuring Allowed Domain ID Lists 15
CFS Distribution of Allowed Domain ID Lists 16
Enabling Distribution 16
Locking the Fabric 16
Committing Changes 17
Discarding Changes 17
Clearing a Fabric Lock 18
Displaying CFS Distribution Status 18
Displaying Pending Changes 18
Displaying Session Status 18
Contiguous Domain ID Assignments 19
Enabling Contiguous Domain ID Assignments 19
FC IDs 19
Persistent FC IDs 20
Enabling the Persistent FC ID Feature 20
Persistent FC ID Configuration Guidelines 21
Configuring Persistent FC IDs 21
Unique Area FC IDs for HBAs 22
Configuring Unique Area FC IDs for an HBA 22
Persistent FC ID Selective Purging 24
Purging Persistent FC IDs 24
Verifying the fcdomain Configuration 24
Default Settings for Fibre Channel Domains 25
CHAPTER 3 Configuring N Port Virtualization 27
Configuring N Port Virtualization 27
Information About NPV 27
NPV Overview 27
NPV Mode 28
Server Interfaces 28
NP Uplinks 29
FLOGI Operation 29
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
iv OL-27932-01
Contents

NPV Traffic Management Guidelines 30
NPV Guidelines and Limitations 30
Configuring NPV 31
Enabling NPV 31
Configuring NPV Interfaces 32
Configuring an NP Interface 32
Configuring a Server Interface 32
Configuring NPV Traffic Management 32
Configuring NPV Traffic Maps 32
Enabling Disruptive Load Balancing 33
Verifying NPV 33
Verifying NPV Examples 34
Verifying NPV Traffic Management 35
CHAPTER 4 Configuring FCoE NPV 37
Information About FCoE NPV 37
FCoE NPV Model 39
Mapping Requirements 40
Port Requirements 41
NPV Features 41
vPC Topologies 42
Supported and Unsupported Topologies 43
Guidelines and Limitations 47
FCoE NPV Configuration Limits 47
Default Settings 48
Enabling FCoE and Enabling NPV 49
Enabling FCoE NPV 49
Configuring NPV Ports for FCoE NPV 50
Verifying FCoE NPV Configuration 50
Configuration Examples for FCoE NPV 51
CHAPTER 5 Configuring VSAN Trunking 55
Configuring VSAN Trunking 55
Information About VSAN Trunking 55
VSAN Trunking Mismatches 56
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
OL-27932-01 v
Contents

VSAN Trunking Protocol 56
Configuring VSAN Trunking 57
Guidelines and Limitations 57
Enabling or Disabling the VSAN Trunking Protocol 57
Trunk Mode 57
Configuring Trunk Mode 58
Trunk-Allowed VSAN Lists 59
Configuring an Allowed-Active List of VSANs 61
Displaying VSAN Trunking Information 62
Default Settings for VSAN Trunks 62
CHAPTER 6 Configuring and Managing VSANs 65
Configuring and Managing VSANs 65
Information About VSANs 65
VSAN Topologies 65
VSAN Advantages 68
VSANs Versus Zones 68
Guidelines and Limitations for VSANs 69
About VSAN Creation 70
Creating VSANs Statically 70
Port VSAN Membership 71
Assigning Static Port VSAN Membership 72
Displaying VSAN Static Membership 72
Default VSANs 73
Isolated VSANs 73
Displaying Isolated VSAN Membership 73
Operational State of a VSAN 74
Static VSAN Deletion 74
Deleting Static VSANs 75
About Load Balancing 75
Configuring Load Balancing 75
Interop Mode 77
Displaying the Static VSAN Configuration 77
Default Settings for VSANs 77
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
vi OL-27932-01
Contents

CHAPTER 7 Configuring and Managing Zones 79
Information About Zones 79
Information About Zoning 79
Zoning Features 79
Zoning Example 81
Zone Implementation 81
Active and Full Zone Sets 82
Configuring a Zone 85
Configuration Examples 85
Zone Sets 86
Activating a Zone Set 87
Default Zone 87
Configuring the Default Zone Access Permission 88
FC Alias Creation 88
Creating FC Aliases 89
Creating FC Aliases Example 89
Creating Zone Sets and Adding Member Zones 90
Zone Enforcement 91
Zone Set Distribution 92
Enabling Full Zone Set Distribution 92
Enabling a One-Time Distribution 92
Recovering from Link Isolation 93
Importing and Exporting Zone Sets 94
Zone Set Duplication 94
Copying Zone Sets 95
Renaming Zones, Zone Sets, and Aliases 95
Cloning Zones, Zone Sets, FC Aliases, and Zone Attribute Groups 96
Clearing the Zone Server Database 97
Verifying the Zone Configuration 97
Enhanced Zoning 98
Enhanced Zoning 98
Changing from Basic Zoning to Enhanced Zoning 99
Changing from Enhanced Zoning to Basic Zoning 99
Enabling Enhanced Zoning 100
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
OL-27932-01 vii
Contents

Modifying the Zone Database 100
Releasing Zone Database Locks 101
Merging the Database 102
Configuring Zone Merge Control Policies 102
Default Zone Policies 103
Configuring System Default Zoning Settings 104
Verifying Enhanced Zone Information 105
Compacting the Zone Database 105
Analyzing the Zone and Zone Set 105
Default Settings for Zones 106
CHAPTER 8 Distributing Device Alias Services 107
Distributing Device Alias Services 107
Information About Device Aliases 107
Device Alias Features 107
Device Alias Requirements 108
Zone Aliases Versus Device Aliases 108
Device Alias Databases 109
Creating Device Aliases 109
Device Alias Modes 110
Device Alias Mode Guidelines and Limitations for Device Alias Services 110
Configuring Device Alias Modes 111
Device Alias Distribution 112
Locking the Fabric 112
Committing Changes 112
Discarding Changes 113
Overriding the Fabric Lock 114
Disabling and Enabling Device Alias Distribution 114
Legacy Zone Alias Configuration 115
Importing a Zone Alias 115
Device Alias Database Merge Guidelines 116
Verifying the Device Alias Configuration 116
Default Settings for Device Alias Services 117
CHAPTER 9 Managing FLOGI, Name Server, FDMI, and RSCN Databases 119
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
viii OL-27932-01
Contents

Managing FLOGI, Name Server, FDMI, and RSCN Databases 119
Fabric Login 119
Name Server Proxy 120
About Registering Name Server Proxies 120
Registering Name Server Proxies 120
Rejecting Duplicate pWWNs 120
Rejecting Duplicate pWWNs 121
Name Server Database Entries 121
Displaying Name Server Database Entries 122
FDMI 122
Displaying FDMI 123
RSCN 123
About RSCN Information 123
Displaying RSCN Information 123
Multi-pid Option 124
Configuring the multi-pid Option 124
Suppressing Domain Format SW-RSCNs 124
Clearing RSCN Statistics 125
Configuring the RSCN Timer 125
Verifying the RSCN Timer Configuration 126
RSCN Timer Configuration Distribution 126
Enabling RSCN Timer Configuration Distribution 127
Locking the Fabric 127
Committing RSCN Timer Configuration Changes 128
Discarding the RSCN Timer Configuration Changes 128
Clearing a Locked Session 129
Displaying RSCN Configuration Distribution Information 129
Default Settings for RSCN 129
CHAPTER 10 Discovering SCSI Targets 131
Discovering SCSI Targets 131
Information About SCSI LUN Discovery 131
About Starting SCSI LUN Discovery 131
Starting SCSI LUN Discovery 132
About Initiating Customized Discovery 132
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
OL-27932-01 ix
Contents

Initiating Customized Discovery 132
Displaying SCSI LUN Information 133
CHAPTER 11 Configuring FC-SP and DHCHAP 135
Information About FC-SP and DHCHAP 135
Fabric Authentication 135
Configuring DHCHAP Authentication 136
DHCHAP Compatibility with Fibre Channel Features 137
About Enabling DHCHAP 137
Enabling DHCHAP 137
DHCHAP Authentication Modes 138
Configuring the DHCHAP Mode 139
DHCHAP Hash Algorithm 140
Configuring the DHCHAP Hash Algorithm 140
DHCHAP Group Settings 141
Configuring the DHCHAP Group Settings 141
DHCHAP Password 141
Configuring DHCHAP Passwords for the Local Switch 142
Password Configuration for Remote Devices 142
Configuring DHCHAP Passwords for Remote Devices 143
DHCHAP Timeout Value 143
Configuring the DHCHAP Timeout Value 143
Configuring DHCHAP AAA Authentication 144
Displaying Protocol Security Information 144
Configuration Examples for Fabric Security 145
Default Settings for Fabric Security 146
CHAPTER 12 Configuring Port Security 149
Configuring Port Security 149
Information About Port Security 149
Port Security Enforcement 150
Auto-Learning 150
Port Security Activation 150
Configuring Port Security 151
Configuring Port Security with Auto-Learning and CFS Distribution 151
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
xOL-27932-01
Contents

Configuring Port Security with Auto-Learning without CFS 152
Configuring Port Security with Manual Database Configuration 152
Enabling Port Security 153
Port Security Activation 153
Activating Port Security 153
Database Activation Rejection 154
Forcing Port Security Activation 154
Database Reactivation 155
Auto-Learning 156
About Enabling Auto-Learning 156
Enabling Auto-Learning 156
Disabling Auto-Learning 157
Auto-Learning Device Authorization 157
Authorization Scenario 158
Port Security Manual Configuration 159
WWN Identification Guidelines 159
Adding Authorized Port Pairs 160
Port Security Configuration Distribution 161
Enabling Port Security Distribution 161
Locking the Fabric 162
Committing the Changes 162
Discarding the Changes 162
Activation and Auto-Learning Configuration Distribution 163
Merging the Port Security Database 165
Database Interaction 165
Database Scenarios 167
Copying the Port Security Database 168
Deleting the Port Security Database 168
Clearing the Port Security Database 168
Displaying Port Security Configuration 169
Default Settings for Port Security 169
CHAPTER 13 Configuring Fabric Binding 171
Configuring Fabric Binding 171
Information About Fabric Binding 171
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
OL-27932-01 xi
Contents

Licensing Requirements for Fabric Binding 171
Port Security Versus Fabric Binding 171
Fabric Binding Enforcement 172
Configuring Fabric Binding 173
Configuring Fabric Binding 173
Enabling Fabric Binding 173
Switch WWN Lists 173
Configuring Switch WWN List 174
Fabric Binding Activation and Deactivation 174
Activating Fabric Binding 175
Forcing Fabric Binding Activation 175
Copying Fabric Binding Configurations 176
Clearing the Fabric Binding Statistics 176
Deleting the Fabric Binding Database 176
Verifying the Fabric Binding Configuration 177
Default Settings for Fabric Binding 177
CHAPTER 14 Configuring Fabric Configuration Servers 179
Configuring Fabric Configuration Servers 179
Information About FCS 179
FCS Characteristics 180
FCS Name Specification 181
Displaying FCS Information 181
Default FCS Settings 181
CHAPTER 15 Configuring Port Tracking 183
Configuring Port Tracking 183
Information About Port Tracking 183
Default Settings for Port Tracking 184
Configuring Port Tracking 185
Enabling Port Tracking 185
Configuring Linked Ports 186
Operationally Binding a Tracked Port 186
Tracking Multiple Ports 186
Tracking Multiple Ports 187
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
xii OL-27932-01
Contents

Monitoring Ports in a VSAN 187
Monitoring Ports in a VSAN 188
Forcefully Shutting down 188
Forcefully Shutting Down a Tracked Port 188
Displaying Port Tracking Information 189
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
OL-27932-01 xiii
Contents

Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
xiv OL-27932-01
Contents

Preface
The preface contains the following sections:
•Audience, page xv
•Document Conventions, page xv
•Related Documentation for Cisco Nexus 6000 Series NX-OS Software, page xvii
•Documentation Feedback, page xviii
•Obtaining Documentation and Submitting a Service Request, page xix
Audience
This publication is for network administrators who configure and maintain Cisco Nexus devices.
Document Conventions
As part of our constant endeavor to remodel our documents to meet our customers' requirements, we have
modified the manner in which we document configuration tasks. As a result of this, you may find a
deviation in the style used to describe these tasks, with the newly included sections of the document
following the new format.
Note
Command descriptions use the following conventions:
DescriptionConvention
Bold text indicates the commands and keywords that you enter literally
as shown.
bold
Italic text indicates arguments for which the user supplies the values.
Italic
Square brackets enclose an optional element (keyword or argument).[x]
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
OL-27932-01 xv

DescriptionConvention
Square brackets enclosing keywords or arguments separated by a vertical
bar indicate an optional choice.
[x | y]
Braces enclosing keywords or arguments separated by a vertical bar
indicate a required choice.
{x | y}
Nested set of square brackets or braces indicate optional or required
choices within optional or required elements. Braces and a vertical bar
within square brackets indicate a required choice within an optional
element.
[x {y | z}]
Indicates a variable for which you supply values, in context where italics
cannot be used.
variable
A nonquoted set of characters. Do not use quotation marks around the
string or the string will include the quotation marks.
string
Examples use the following conventions:
DescriptionConvention
Terminal sessions and information the switch displays are in screen font.screen font
Information you must enter is in boldface screen font.boldface screen font
Arguments for which you supply values are in italic screen font.
italic screen font
Nonprinting characters, such as passwords, are in angle brackets.< >
Default responses to system prompts are in square brackets.[ ]
An exclamation point (!) or a pound sign (#) at the beginning of a line
of code indicates a comment line.
!, #
This document uses the following conventions:
Means reader take note. Notes contain helpful suggestions or references to material not covered in the
manual.
Note
Means reader be careful. In this situation, you might do something that could result in equipment damage
or loss of data.
Caution
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
xvi OL-27932-01
Preface
Document Conventions

Related Documentation for Cisco Nexus 6000 Series NX-OS
Software
The entire Cisco NX-OS 6000 Series documentation set is available at the following URL:
http://www.cisco.com/en/US/products/ps12806/tsd_products_support_series_home.html
Release Notes
The release notes are available at the following URL:
http://www.cisco.com/c/en/us/support/switches/nexus-6000-series-switches/products-release-notes-list.html
Configuration Guides
These guides are available at the following URL:
http://www.cisco.com/c/en/us/support/switches/nexus-6000-series-switches/
products-installation-and-configuration-guides-list.html
The documents in this category include:
•Cisco Nexus 6000 Series NX-OS Adapter-FEX Configuration Guide
•Cisco Nexus 6000 Series NX-OS FabricPath Configuration Guide
•Cisco Nexus 6000 Series NX-OS FCoE Configuration Guide
•Cisco Nexus 6000 Series NX-OS Fundamentals Configuration Guide
•Cisco Nexus 6000 Series NX-OS Interfaces Configuration Guide
•Cisco Nexus 6000 Series NX-OS Layer 2 Switching Configuration Guide
•Cisco Nexus 6000 Series NX-OS Multicast Routing Configuration Guide
•Cisco Nexus 6000 Series NX-OS Quality of Service Configuration Guide
•Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide
•Cisco Nexus 6000 Series NX-OS Security Configuration Guide
•Cisco Nexus 6000 Series NX-OS System Management Configuration Guide
•Cisco Nexus 6000 Series NX-OS Unicast Routing Configuration Guide
Installation and Upgrade Guides
These guides are available at the following URL:
http://www.cisco.com/c/en/us/support/switches/nexus-6000-series-switches/products-installation-guides-list.html
The document in this category include:
•Cisco Nexus 6000 Series NX-OS Software Upgrade and Downgrade Guides
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
OL-27932-01 xvii
Preface
Related Documentation for Cisco Nexus 6000 Series NX-OS Software

Licensing Guide
The License and Copyright Information for Cisco NX-OS Software is available at http://www.cisco.com/en/
US/docs/switches/datacenter/sw/4_0/nx-os/license_agreement/nx-ossw_lisns.html.
Command References
These guides are available at the following URL:
http://www.cisco.com/c/en/us/support/switches/nexus-6000-series-switches/
products-command-reference-list.html
The documents in this category include:
•Cisco Nexus 6000 Series NX-OS Fabric Extender Command Reference
•Cisco Nexus 6000 Series NX-OS FabricPath Command Reference
•Cisco Nexus 6000 Series NX-OS Fundamentals Command Reference
•Cisco Nexus 6000 Series NX-OS Interfaces Command Reference
•Cisco Nexus 6000 Series NX-OS Layer 2 Interfaces Command Reference
•Cisco Nexus 6000 Series NX-OS Multicast Routing Command Reference
•Cisco Nexus 6000 Series NX-OS Quality of Service Command Reference
•Cisco Nexus 6000 Series NX-OS Security Command Reference
•Cisco Nexus 6000 Series NX-OS System Management Command Reference
•Cisco Nexus 6000 Series NX-OS TrustSec Command Reference
•Cisco Nexus 6000 Series NX-OS Unicast Routing Command Reference
•Cisco Nexus 6000 Series NX-OS Virtual Port Channel Command Reference
Technical References
The Cisco Nexus 6000 Series NX-OS MIB Reference is available at http://www.cisco.com/en/US/docs/switches/
datacenter/nexus6000/sw/mib/reference/NX6000_MIBRef.html.
Error and System Messages
The Cisco Nexus 6000 Series NX-OS System Message Guide is available at http://www.cisco.com/c/en/us/td/
docs/switches/datacenter/nexus6000/sw/system_messages/reference/sl_nxos_book.html.
Troubleshooting Guide
The Cisco Nexus 6000 Series NX-OS Troubleshooting Guide is available at http://www.cisco.com/c/en/us/
support/switches/nexus-6000-series-switches/tsd-products-support-troubleshoot-and-alerts.html.
Documentation Feedback
To provide technical feedback on this document, or to report an error or omission, please send your comments
to: .
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
xviii OL-27932-01
Preface
Documentation Feedback

We appreciate your feedback.
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service
request, and gathering additional information, see What's New in Cisco Product Documentation.
To receive new and revised Cisco technical content directly to your desktop, you can subscribe to the What's
New in Cisco Product Documentation RSS feed. RSS feeds are a free service.
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
OL-27932-01 xix
Preface
Obtaining Documentation and Submitting a Service Request

Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
xx OL-27932-01
Preface
Obtaining Documentation and Submitting a Service Request