Cisco Nexus 6000 User manual

Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide,
Release 6.x
First Published: 2013-01-30
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Text Part Number: OL-27932-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
©2013 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface Preface xv
Audience xv
Document Conventions xv
Related Documentation for Cisco Nexus 6000 Series NX-OS Software xvii
Documentation Feedback xviii
Obtaining Documentation and Submitting a Service Request xix
CHAPTER 1 Overview 1
SAN Switching Overview 1
CHAPTER 2 Configuring Fibre Channel Domain Parameters 5
Information About Domain Parameters 5
Fibre Channel Domains 5
Domain Restarts 6
Restarting a Domain 7
Domain Manager Fast Restart 7
Enabling Domain Manager Fast Restart 7
Switch Priority 8
Configuring Switch Priority 8
About fcdomain Initiation 9
Disabling or Reenabling fcdomains 9
Configuring Fabric Names 9
Incoming RCFs 10
Rejecting Incoming RCFs 10
Autoreconfiguring Merged Fabrics 11
Enabling Autoreconfiguration 11
Domain IDs 12
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
OL-27932-01 iii

Domain IDs - Guidelines 12
Configuring Static or Preferred Domain IDs 14
Allowed Domain ID Lists 15
Configuring Allowed Domain ID Lists 15
CFS Distribution of Allowed Domain ID Lists 16
Enabling Distribution 16
Locking the Fabric 16
Committing Changes 17
Discarding Changes 17
Clearing a Fabric Lock 18
Displaying CFS Distribution Status 18
Displaying Pending Changes 18
Displaying Session Status 18
Contiguous Domain ID Assignments 19
Enabling Contiguous Domain ID Assignments 19
FC IDs 19
Persistent FC IDs 20
Enabling the Persistent FC ID Feature 20
Persistent FC ID Configuration Guidelines 21
Configuring Persistent FC IDs 21
Unique Area FC IDs for HBAs 22
Configuring Unique Area FC IDs for an HBA 22
Persistent FC ID Selective Purging 24
Purging Persistent FC IDs 24
Verifying the fcdomain Configuration 24
Default Settings for Fibre Channel Domains 25
CHAPTER 3 Configuring N Port Virtualization 27
Configuring N Port Virtualization 27
Information About NPV 27
NPV Overview 27
NPV Mode 28
Server Interfaces 28
NP Uplinks 29
FLOGI Operation 29
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
iv OL-27932-01
Contents

NPV Traffic Management Guidelines 30
NPV Guidelines and Limitations 30
Configuring NPV 31
Enabling NPV 31
Configuring NPV Interfaces 32
Configuring an NP Interface 32
Configuring a Server Interface 32
Configuring NPV Traffic Management 32
Configuring NPV Traffic Maps 32
Enabling Disruptive Load Balancing 33
Verifying NPV 33
Verifying NPV Examples 34
Verifying NPV Traffic Management 35
CHAPTER 4 Configuring FCoE NPV 37
Information About FCoE NPV 37
FCoE NPV Model 39
Mapping Requirements 40
Port Requirements 41
NPV Features 41
vPC Topologies 42
Supported and Unsupported Topologies 43
Guidelines and Limitations 47
FCoE NPV Configuration Limits 47
Default Settings 48
Enabling FCoE and Enabling NPV 49
Enabling FCoE NPV 49
Configuring NPV Ports for FCoE NPV 50
Verifying FCoE NPV Configuration 50
Configuration Examples for FCoE NPV 51
CHAPTER 5 Configuring VSAN Trunking 55
Configuring VSAN Trunking 55
Information About VSAN Trunking 55
VSAN Trunking Mismatches 56
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
OL-27932-01 v
Contents

VSAN Trunking Protocol 56
Configuring VSAN Trunking 57
Guidelines and Limitations 57
Enabling or Disabling the VSAN Trunking Protocol 57
Trunk Mode 57
Configuring Trunk Mode 58
Trunk-Allowed VSAN Lists 59
Configuring an Allowed-Active List of VSANs 61
Displaying VSAN Trunking Information 62
Default Settings for VSAN Trunks 62
CHAPTER 6 Configuring and Managing VSANs 65
Configuring and Managing VSANs 65
Information About VSANs 65
VSAN Topologies 65
VSAN Advantages 68
VSANs Versus Zones 68
Guidelines and Limitations for VSANs 69
About VSAN Creation 70
Creating VSANs Statically 70
Port VSAN Membership 71
Assigning Static Port VSAN Membership 72
Displaying VSAN Static Membership 72
Default VSANs 73
Isolated VSANs 73
Displaying Isolated VSAN Membership 73
Operational State of a VSAN 74
Static VSAN Deletion 74
Deleting Static VSANs 75
About Load Balancing 75
Configuring Load Balancing 75
Interop Mode 77
Displaying the Static VSAN Configuration 77
Default Settings for VSANs 77
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
vi OL-27932-01
Contents

CHAPTER 7 Configuring and Managing Zones 79
Information About Zones 79
Information About Zoning 79
Zoning Features 79
Zoning Example 81
Zone Implementation 81
Active and Full Zone Sets 82
Configuring a Zone 85
Configuration Examples 85
Zone Sets 86
Activating a Zone Set 87
Default Zone 87
Configuring the Default Zone Access Permission 88
FC Alias Creation 88
Creating FC Aliases 89
Creating FC Aliases Example 89
Creating Zone Sets and Adding Member Zones 90
Zone Enforcement 91
Zone Set Distribution 92
Enabling Full Zone Set Distribution 92
Enabling a One-Time Distribution 92
Recovering from Link Isolation 93
Importing and Exporting Zone Sets 94
Zone Set Duplication 94
Copying Zone Sets 95
Renaming Zones, Zone Sets, and Aliases 95
Cloning Zones, Zone Sets, FC Aliases, and Zone Attribute Groups 96
Clearing the Zone Server Database 97
Verifying the Zone Configuration 97
Enhanced Zoning 98
Enhanced Zoning 98
Changing from Basic Zoning to Enhanced Zoning 99
Changing from Enhanced Zoning to Basic Zoning 99
Enabling Enhanced Zoning 100
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
OL-27932-01 vii
Contents

Modifying the Zone Database 100
Releasing Zone Database Locks 101
Merging the Database 102
Configuring Zone Merge Control Policies 102
Default Zone Policies 103
Configuring System Default Zoning Settings 104
Verifying Enhanced Zone Information 105
Compacting the Zone Database 105
Analyzing the Zone and Zone Set 105
Default Settings for Zones 106
CHAPTER 8 Distributing Device Alias Services 107
Distributing Device Alias Services 107
Information About Device Aliases 107
Device Alias Features 107
Device Alias Requirements 108
Zone Aliases Versus Device Aliases 108
Device Alias Databases 109
Creating Device Aliases 109
Device Alias Modes 110
Device Alias Mode Guidelines and Limitations for Device Alias Services 110
Configuring Device Alias Modes 111
Device Alias Distribution 112
Locking the Fabric 112
Committing Changes 112
Discarding Changes 113
Overriding the Fabric Lock 114
Disabling and Enabling Device Alias Distribution 114
Legacy Zone Alias Configuration 115
Importing a Zone Alias 115
Device Alias Database Merge Guidelines 116
Verifying the Device Alias Configuration 116
Default Settings for Device Alias Services 117
CHAPTER 9 Managing FLOGI, Name Server, FDMI, and RSCN Databases 119
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
viii OL-27932-01
Contents

Managing FLOGI, Name Server, FDMI, and RSCN Databases 119
Fabric Login 119
Name Server Proxy 120
About Registering Name Server Proxies 120
Registering Name Server Proxies 120
Rejecting Duplicate pWWNs 120
Rejecting Duplicate pWWNs 121
Name Server Database Entries 121
Displaying Name Server Database Entries 122
FDMI 122
Displaying FDMI 123
RSCN 123
About RSCN Information 123
Displaying RSCN Information 123
Multi-pid Option 124
Configuring the multi-pid Option 124
Suppressing Domain Format SW-RSCNs 124
Clearing RSCN Statistics 125
Configuring the RSCN Timer 125
Verifying the RSCN Timer Configuration 126
RSCN Timer Configuration Distribution 126
Enabling RSCN Timer Configuration Distribution 127
Locking the Fabric 127
Committing RSCN Timer Configuration Changes 128
Discarding the RSCN Timer Configuration Changes 128
Clearing a Locked Session 129
Displaying RSCN Configuration Distribution Information 129
Default Settings for RSCN 129
CHAPTER 10 Discovering SCSI Targets 131
Discovering SCSI Targets 131
Information About SCSI LUN Discovery 131
About Starting SCSI LUN Discovery 131
Starting SCSI LUN Discovery 132
About Initiating Customized Discovery 132
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
OL-27932-01 ix
Contents

Initiating Customized Discovery 132
Displaying SCSI LUN Information 133
CHAPTER 11 Configuring FC-SP and DHCHAP 135
Information About FC-SP and DHCHAP 135
Fabric Authentication 135
Configuring DHCHAP Authentication 136
DHCHAP Compatibility with Fibre Channel Features 137
About Enabling DHCHAP 137
Enabling DHCHAP 137
DHCHAP Authentication Modes 138
Configuring the DHCHAP Mode 139
DHCHAP Hash Algorithm 140
Configuring the DHCHAP Hash Algorithm 140
DHCHAP Group Settings 141
Configuring the DHCHAP Group Settings 141
DHCHAP Password 141
Configuring DHCHAP Passwords for the Local Switch 142
Password Configuration for Remote Devices 142
Configuring DHCHAP Passwords for Remote Devices 143
DHCHAP Timeout Value 143
Configuring the DHCHAP Timeout Value 143
Configuring DHCHAP AAA Authentication 144
Displaying Protocol Security Information 144
Configuration Examples for Fabric Security 145
Default Settings for Fabric Security 146
CHAPTER 12 Configuring Port Security 149
Configuring Port Security 149
Information About Port Security 149
Port Security Enforcement 150
Auto-Learning 150
Port Security Activation 150
Configuring Port Security 151
Configuring Port Security with Auto-Learning and CFS Distribution 151
Cisco Nexus 6000 Series NX-OS SAN Switching Configuration Guide, Release 6.x
xOL-27932-01
Contents