Cisco Nexus 9000 Series User manual

Cisco Nexus 9000 Series NX-OS System Management Configuration
Guide, Release 6.x
First Published: 2013-11-20
Last Modified: 2014-10-10
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version
of the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
This product includes cryptographic software written by Eric Young ([email protected]).
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. (http://www.openssl.org/)
This product includes software written by Tim Hudson ([email protected]).
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1110R)
©2013-2014 Cisco Systems, Inc. All rights reserved.

CONTENTS
Preface Preface xvii
Audience xvii
Document Conventions xvii
Related Documentation for Cisco Nexus 9000 Series Switches xviii
Documentation Feedback xviii
Obtaining Documentation and Submitting a Service Request xix
CHAPTER 1 New and Changed Information 1
New and Changed Information 1
CHAPTER 2 Overview 3
Software Image 4
Cisco NX-OS Device Configuration Methods 4
Configuring with CLI or XML Management Interface 5
Configuring with Cisco DCNM 5
Network Time Protocol 5
Cisco Discovery Protocol 5
System Messages 5
Smart Call Home 6
Rollback 6
Session Manager 6
Scheduler 6
SNMP 6
RMON 6
Online Diagnostics 7
Embedded Event Manager 7
Onboard Failure Logging 7
Cisco Nexus 9000 Series NX-OS System Management Configuration Guide, Release 6.x
iii

SPAN 7
ERSPAN 7
LLDP 7
SMUs 8
Virtual Device Contexts 8
Troubleshooting Features 8
CHAPTER 3 Configuring NTP 9
About NTP 9
NTP Associations 10
NTP as a Time Server 10
Clock Manager 10
High Availability 10
Virtualization Support 11
Licensing Requirements for NTP 11
Prerequisites for NTP 11
Guidelines and Limitations for NTP 11
Default Settings for NTP 12
Configuring NTP 12
Enabling or Disabling NTP 12
Configuring the Device as an Authoritative NTP Server 13
Configuring an NTP Server and Peer 13
Configuring NTP Authentication 15
Configuring NTP Access Restrictions 16
Configuring the NTP Source IP Address 17
Configuring the NTP Source Interface 18
Configuring NTP Logging 18
Verifying the NTP Configuration 19
Configuration Examples for NTP 19
Additional References 21
Related Documents 21
MIBs 21
CHAPTER 4 Configuring CDP 23
About CDP 23
Cisco Nexus 9000 Series NX-OS System Management Configuration Guide, Release 6.x
iv
Contents

VTP Feature Support 24
High Availability 24
Virtualization Support 25
Licensing Requirements for CDP 25
Guidelines and Limitations for CDP 25
Default Settings for CDP 25
Configuring CDP 25
Enabling or Disabling CDP Globally 26
Enabling or Disabling CDP on an Interface 26
Configuring Optional CDP Parameters 27
Verifying the CDP Configuration 28
Configuration Example for CDP 28
Additional References 29
MIBs 29
CHAPTER 5 Configuring System Message Logging 31
About System Message Logging 31
Syslog Servers 32
Licensing Requirements for System Message Logging 32
Guidelines and Limitations for System Message Logging 33
Default Settings for System Message Logging 33
Configuring System Message Logging 33
Configuring System Message Logging to Terminal Sessions 33
Logging System Messages to a File 35
Configuring Module and Facility Messages Logging 37
Configuring Syslog Servers 40
Configuring Syslog Servers on a UNIX or Linux System 42
Displaying and Clearing Log Files 43
Verifying the System Message Logging Configuration 44
Configuration Example for System Message Logging 44
Additional References 45
Related Documents 45
CHAPTER 6 Configuring Smart Call Home 47
About Smart Call Home 47
Cisco Nexus 9000 Series NX-OS System Management Configuration Guide, Release 6.x
v
Contents

Destination Profiles 48
Smart Call Home Alert Groups 48
Smart Call Home Message Levels 51
Obtaining Smart Call Home 52
Database Merge Guidelines 53
High Availability 53
Virtualization Support 53
Licensing Requirements for Smart Call Home 53
Prerequisites for Smart Call Home 54
Guidelines and Limitations for Smart Call Home 54
Default Settings for Smart Call Home 54
Configuring Smart Call Home 55
Configuring Contact Information 55
Creating a Destination Profile 57
Modifying a Destination Profile 58
Associating an Alert Group with a Destination Profile 60
Adding Show Commands to an Alert Group 61
Configuring the Email Server 62
Configuring VRFs To Send Messages Using HTTP 64
Configuring an HTTP Proxy Server 65
Configuring Periodic Inventory Notifications 66
Disabling Duplicate Message Throttling 67
Enabling or Disabling Smart Call Home 68
Testing the Smart Call Home Configuration 69
Verifying the Smart Call Home Configuration 69
Configuration Examples for Smart Call Home 70
Additional References 71
Event Triggers 71
Message Formats 72
Short Text Message Format 73
Common Event Message Fields 73
Alert Group Message Fields 76
Fields for Reactive and Proactive Event Messages 76
Fields for Inventory Event Messages 76
Fields for User-Generated Test Messages 77
Cisco Nexus 9000 Series NX-OS System Management Configuration Guide, Release 6.x
vi
Contents

Sample Syslog Alert Notification in Full-Text Format 77
Sample Syslog Alert Notification in XML Format 80
MIBs 83
CHAPTER 7 Configuring Rollback 85
About Rollbacks 85
Automatically Generated System Checkpoints 86
High Availability 86
Virtualization Support 86
Licensing Requirements for Rollbacks 87
Prerequisites for Rollbacks 87
Guidelines and Limitations for Rollbacks 87
Default Settings for Rollbacks 88
Configuring Rollbacks 88
Creating a Checkpoint 88
Implementing a Rollback 89
Verifying the Rollback Configuration 89
Configuration Example for Rollback 90
Additional References 90
Related Documents 90
CHAPTER 8 Configuring Session Manager 91
About Session Manager 91
High Availability 92
Licensing Requirements for Session Manager 92
Prerequisites for Session Manager 92
Guidelines and Limitations for Session Manager 92
Configuring Session Manager 92
Creating a Session 93
Configuring ACLs in a Session 93
Verifying a Session 94
Committing a Session 94
Saving a Session 94
Discarding a Session 95
Verifying the Session Manager Configuration 95
Cisco Nexus 9000 Series NX-OS System Management Configuration Guide, Release 6.x
vii
Contents

Configuration Example for Session Manager 95
Additional References 96
Related Documents 96
CHAPTER 9 Configuring the Scheduler 97
About the Scheduler 97
Remote User Authentication 98
Logs 98
High Availability 98
Licensing Requirements for the Scheduler 98
Prerequisites for the Scheduler 98
Guidelines and Limitations for the Scheduler 99
Default Settings for the Scheduler 99
Configuring the Scheduler 99
Enabling or Disabling the Scheduler 99
Defining the Scheduler Log File Size 100
Configuring Remote User Authentication 100
Defining a Job 101
Deleting a Job 102
Defining a Timetable 103
Clearing the Scheduler Log File 105
Verifying the Scheduler Configuration 105
Configuration Examples for the Scheduler 106
Creating a Scheduler Job 106
Scheduling a Scheduler Job 106
Displaying the Job Schedule 106
Displaying the Results of Running Scheduler Jobs 107
CHAPTER 10 Configuring SNMP 109
About SNMP 109
SNMP Functional Overview 109
SNMP Notifications 110
SNMPv3 111
Security Models and Levels for SNMPv1, v2, v3 111
User-Based Security Model 112
Cisco Nexus 9000 Series NX-OS System Management Configuration Guide, Release 6.x
viii
Contents

CLI and SNMP User Synchronization 113
Group-Based SNMP Access 114
SNMP and Embedded Event Manager 114
Multiple Instance Support 114
High Availability for SNMP 115
Virtualization Support for SNMP 115
Licensing Requirements for SNMP 115
Guidelines and Limitations for SNMP 115
Default Settings for SNMP 115
Configuring SNMP 116
Configuring SNMP Users 116
Enforcing SNMP Message Encryption 116
Assigning SNMPv3 Users to Multiple Roles 117
Creating SNMP Communities 118
Filtering SNMP Requests 118
Configuring SNMP Notification Receivers 119
Configuring a Source Interface for SNMP Notifications 120
Configuring the Notification Target User 121
Configuring SNMP Notification Receivers with VRFs 122
Configuring SNMP to Send Traps Using an Inband Port 123
Enabling SNMP Notifications 124
Disabling Link Notifications on an Interface 132
Displaying SNMP ifIndex for an Interface 133
Enabling a One-Time Authentication for SNMP over TCP 133
Assigning SNMP Device Contact and Location Information 133
Configuring the Context to Network Entity Mapping 134
Disabling SNMP 135
Modifying the AAA Synchronization Time 136
Verifying SNMP Configuration 136
Configuration Examples for SNMP 137
Additional References 139
Related Documents 139
RFCs 139
MIBs 139
Cisco Nexus 9000 Series NX-OS System Management Configuration Guide, Release 6.x
ix
Contents

CHAPTER 11 Configuring RMON 141
About RMON 141
RMON Alarms 142
RMON Events 142
High Availability for RMON 143
Virtualization Support for RMON 143
Licensing Requirements for RMON 143
Guidelines and Limitations for RMON 143
Default Settings for RMON 143
Configuring RMON 144
Configuring RMON Alarms 144
Configuring RMON Events 145
Verifying the RMON Configuration 146
Configuration Examples for RMON 146
Additional References 146
MIBs 146
CHAPTER 12 Configuring Online Diagnostics 147
About Online Diagnostics 147
Bootup Diagnostics 148
Runtime or Health Monitoring Diagnostics 148
On-Demand Diagnostics 150
High Availability 150
Virtualization Support 151
Licensing Requirements for Online Diagnostics 151
Guidelines and Limitations for Online Diagnostics 151
Default Settings for Online Diagnostics 151
Configuring Online Diagnostics 152
Setting the Bootup Diagnostic Level 152
Activating a Diagnostic Test 153
Starting or Stopping an On-Demand Diagnostic Test 154
Simulating Diagnostic Results 154
Clearing Diagnostic Results 155
Verifying the Online Diagnostics Configuration 155
Cisco Nexus 9000 Series NX-OS System Management Configuration Guide, Release 6.x
x
Contents