background image

 

 

© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. 

Page 6 of 39 

VSB deployments support the ISO and OVA image formats. OVA support allows users to deploy a VSB from a 

VMware virtual machine file format. A common use case is migration of the VSM as a virtual machine to the Cisco 

Nexus 1100 Series. 

The Cisco Nexus 1110-S can host up to 6 VSBs, and the Cisco Nexus 1110-X can host up to 10 VSBs. These 

VSBs can be any combination of the VSBs supported. Figure 2 shows an example of a configuration. 

Figure 2.   

Cisco Nexus 1100 Series with Four VSBs: Cisco VSMs, VSGs, NAM, and DCNM 

 

Table 1 shows the weight of each virtual service in the Cisco Nexus 1110-S and 1110-X platforms. 

Table 1. 

Weighting Matrix to Determine Maximum Capacity of VSBs on Cisco Nexus 1100 Series VSAs 

 

Cisco VSM  

Cisco VSG  

Cisco NAM  

Cisco DCNM  

Total Weight  

Cisco Nexus 1110-S  

1  

1  

2  

2  

<=6  

Cisco Nexus 1110-X  

1  

1  

2  

2  

<=10  

Sample Cisco Nexus 1110-S Configurations 

● 

Six Cisco VSMs 

● 

Six Cisco VSGs 

● 

Three Cisco VSMs and three Cisco VSGs 

● 

One Cisco VSM, one Cisco VSG, one Cisco NAM, and one Cisco DCNM 

Sample Cisco Nexus 1110-X Configurations 

● 

Ten Cisco VSMs 

● 

Ten Cisco VSGs 

● 

Five Cisco VSMs and five Cisco VSGs 

● 

Three Cisco VSMs, three Cisco VSGs, one Cisco NAM, and one Cisco DCNM 

Summary of Contents for Nexus 1110-S

Page 1: ...isco and or its affiliates All rights reserved This document is Cisco Public Information Page 1 of 39 Cisco Nexus 1100 Series Virtual Services Appliances Deployment Guide Version 1 0 June 2013 Deployment Guide ...

Page 2: ... 18 Cisco Nexus 5000 1 and Nexus 5000 2 Configuration 18 Uplink Type 2 19 Cisco Nexus 5000 1 and Nexus 5000 2 Configuration 19 Uplink Type 3 20 Cisco Nexus 5000 1 and Nexus 5000 2 Configuration 21 Uplink Type 4 21 Cisco Nexus 5000 1 and Nexus 5000 2 Configuration 22 Uplink Type 5 22 Cisco Nexus 5000 1 and Nexus 5000 2 Configuration 23 Deploying the Cisco Nexus 1000V Series VSM on the Cisco Nexus 1...

Page 3: ...ment is Cisco Public Information Page 3 of 39 Instantiate the Cisco Nexus 1000V Series VSM 32 Verify the Cisco Nexus 1000V Series VSB 34 Complete the Cisco Nexus 1000V Series Installation 35 For More Information 38 Cisco Nexus 1100 Series Technical Documentation 38 ...

Page 4: ...Nexus VSAs crucial components of a virtual access switch solution Figure 1 Cisco Nexus 1110 S and 1110 X Virtual Services Appliances Cisco Nexus 1000V Series Switches Cisco Nexus 1000V Series Switches are virtual machine access switches They are intelligent switches designed for hypervisor environments running the Cisco NX OS Software operating system Operating inside the hypervisor the Cisco Nexu...

Page 5: ...mponents The physical components of the Cisco Nexus 1110 X are based on the Cisco UCS C200 M2 High Density Rack Server physical appliance containing Two 2 00 GHz Intel Xeon E5 2650 processors each with eight cores Eight 8 GB DDR3 1600 MHz RDIMMs Four 1 TB SATA HDDs One Intel Quad Gigabit Ethernet adapter and two 1 Gigabit Ethernet LOM interfaces One Cisco UCS Virtual Interface Card VIC 1225 dual p...

Page 6: ...ration Figure 2 Cisco Nexus 1100 Series with Four VSBs Cisco VSMs VSGs NAM and DCNM Table 1 shows the weight of each virtual service in the Cisco Nexus 1110 S and 1110 X platforms Table 1 Weighting Matrix to Determine Maximum Capacity of VSBs on Cisco Nexus 1100 Series VSAs Cisco VSM Cisco VSG Cisco NAM Cisco DCNM Total Weight Cisco Nexus 1110 S 1 1 2 2 6 Cisco Nexus 1110 X 1 1 2 2 10 Sample Cisco...

Page 7: ... Cisco Nexus 1100 Series appliances to form a high availability pair the control VLAN and domain ID of both Cisco Nexus 1100 Series appliances must match Another high availability feature built into the Cisco Nexus 1100 Series is the capability of the Cisco Nexus VSA Manager to automatically distribute the placement of the active VSBs across the two appliances This feature helps balance the distri...

Page 8: ...hine data traffic However when Cisco NAM or VSG VSBs are deployed data traffic from selected virtual machines will flow to the Cisco Nexus 1100 Series to be processed by the respective network service The decision to use or not use these other VSBs influences the choice of network connectivity option used for connecting the Cisco Nexus 1100 Series to the network Management VLAN The management VLAN...

Page 9: ...or choosing the best option Network Connection Option 1 Option 1 the simplest way of connecting the Cisco Nexus 1100 Series to the network uses the two LOM interfaces to carry all traffic types management control packet and data In this configuration each uplink connects to two different upstream switches to provide redundancy Figure 5 Figure 5 Network Connection Option 1 Option 1 is preferred in ...

Page 10: ...carry only data traffic In this configuration the two interfaces used for management control and packet traffic should be connected to two separate upstream switches for redundancy In addition the four ports used for data traffic should be split between two upstream switches for redundancy Not all four interfaces are required and their use depends on bandwidth requirements Use a minimum of two int...

Page 11: ...sco Nexus 1100 Series The management control and packet traffic is kept physically separate from the data traffic helping ensure that data traffic does not divert cycles from the other traffic Of the four available connectivity options option 2 provides the most dedicated bandwidth for Cisco NAM traffic and should be used by customers who want to increase the Cisco NAM capabilities Figure 8 Figure...

Page 12: ...hannel but a vPC configuration would also be valid Network Connection Option 3 Option 3 uses the two LOM interfaces for management traffic only and it uses the four interfaces on the PCI card to carry control packet and data traffic In this configuration the two management interfaces should be connected to two separate upstream switches for redundancy In addition the four ports used for control pa...

Page 13: ... option As in the PortChannel configuration for network option 2 a vPC configuration is also valid Network Connection Option 4 Option 4 uses the two LOM interfaces for management traffic two of the four PCI interfaces for control and packet traffic and the other two PCI interfaces for data traffic Each of these pairs of interfaces should be split between two upstream switches for redundancy Figure...

Page 14: ...nection Option 4 Option 4 is well suited for customers who want to use the Cisco NAM but require separate data and control networks Separating the control from the data network helps ensure that Cisco NAM traffic does not divert cycles from control traffic and therefore affect connectivity Figure 12 Figure 12 Option 4 Configuration ...

Page 15: ...n define a VSB to use a particular interface This approach enables a more specific level of traffic engineering for security purposes For example a VSM VSB for production can use an interface connected to the production network and another VSM VSB can be created for the DMZ which uses another interface connected to the DMZ network Figure 13 shows two of the possible options with the flexible netwo...

Page 16: ...ther configuration option is dedication of a single interface to a particular VSB the Cisco Nexus 1100 Series has six physical interfaces but one of the interfaces needs to be used for Cisco Nexus 1100 Series communication so five interfaces are available to host dedicated VSBs Figure 15 shows a possible connectivity configuration for this option ...

Page 17: ...ious section discussed the five options for connecting the Cisco Nexus 1100 Series to the network These methods can be used in various areas of the network Typically Cisco Nexus 1100 Series appliances are deployed within a central management domain Often this location is the location in which other network appliances such as Cisco Wide Area Application Services WAAS and NAM appliances are deployed...

Page 18: ...rs Note that this discussion can also apply when you connect to other upstream switches Uplink Type 1 In the uplink type 1 topology Figure 16 all traffic management control and VSB data traffic is switched out at an effective bandwidth of 1 Gbps Both ports on the Cisco Nexus 1100 Series Ethernet interfaces 1 and 2 are teamed to form an active standby pair This uplink type is simplistic and does no...

Page 19: ...he VSB data traffic to use Figure 17 Uplink Type 2 Here LACP PortChannel technology is used on the upstream switches to give each Cisco Nexus 1100 Series VSA its own PortChannel across the two Cisco Nexus 5000 Series Switches The configuration upstream would look similar to the following Cisco Nexus 5000 1 and Nexus 5000 2 Configuration interface ethernet 101 1 1 101 1 2 switchport mode trunk mult...

Page 20: ...ed out of the first two Ethernet interfaces Ethernet interfaces 1 and 2 are forwarding as an active standby pair just as in the other uplink types However both control and VSB data traffic is carried out of Ethernet interfaces 3 through 6 If vPC or similar clustering is used on the upstream switches the effective combined bandwidth is 5 Gbps for each Cisco Nexus 1100 Series VSA This uplink type is...

Page 21: ...for N1110 Primary vpc 1110 interface ethernet 101 1 5 101 1 6 switchport mode trunk multiple vlans trunked across link switchport trunk allowed vlan 250 251 only allow control and data vlans spanning tree port type edge trunk enable portfast edge channel group 1011 mode active add interface to port channel interface port channel 1011 this is a unique vpc for N1110 Secondary vpc 1011 Uplink Type 4 ...

Page 22: ...70 multiple mgmt vlan s trunked across link spanning tree port type edge trunk enable portfast edge interface ethernet 101 1 3 101 1 4 switchport mode trunk switchport trunk allowed vlan 250 multiple Control vlans trunked across link spanning tree port type edge trunk enable portfast edge interface ethernet 101 1 5 101 1 6 switchport mode trunk switchport trunk allowed vlan 251 multiple VSB data v...

Page 23: ...mode trunk multiple vlans trunked across link switchport trunk allowed vlan 170 250 251 only allow mgmt control and data vlans spanning tree port type edge trunk enable portfast edge channel group 1110 mode active add interface to port channel interface port channel 1110 this is a unique vpc for N1110 Primary vpc 1110 interface ethernet 101 1 4 6 switchport mode trunk switchport trunk allowed vlan...

Page 24: ...es image For more information about VSM high availability see the Cisco Nexus 1000V Series high availability and redundancy configuration guide Cisco Nexus 1000V Series Backup and Restore Procedures With the release of Cisco Nexus 1000V Series Version 4 2 1 SV1 4a and Cisco Nexus 1100 Series Version 4 2 1 SP1 3 firmware you can now back up and restore the network configuration of the Cisco Nexus 1...

Page 25: ...s Across Data Centers Hosting the Cisco Nexus 1000V Series VSM on the Cisco Nexus 1100 Series VSA provides additional benefits when the VSM spans multiple data centers Because the Cisco Nexus 1100 Series is managed and operated by the network administrator it provides the following benefits compared to deployment of the VSM as a virtual machine With a VSM virtual machine deployment the network adm...

Page 26: ... deployment in a single data center To help ensure high availability the Cisco Nexus 1100 Series pair must be Layer 2 adjacent similar to the Cisco Nexus 1000V Series VSM and it must have a round trip latency of less than 10 milliseconds ms Appendix Quick Configuration Guide This appendix provides a quick configuration guide for instantiating a VSM on a Cisco Nexus 1100 Series VSA The example uses...

Page 27: ...Ports Connected to Cisco Nexus 2248 5548P 1 show run interface ethernet 100 1 37 Command show running config interface Ethernet100 1 37 Time Tue Oct 23 17 51 12 2012 version 5 1 3 N1 1 interface Ethernet100 1 37 switchport mode trunk switchport trunk allowed vlan 172 spanning tree port type edge trunk 5548P 1 show run interface ethernet 100 1 38 Command show running config interface Ethernet100 1 ...

Page 28: ...e ethernet 100 1 40 Command show running config interface Ethernet100 1 40 Time Tue Oct 23 18 11 03 2012 version 5 1 3 N1 1 interface Ethernet100 1 40 switchport mode trunk switchport trunk allowed vlan 50 spanning tree port type edge trunk channel group 139 mode active 5548P 1 The configuration of the second Cisco Nexus 5548P will be similar The PortChannel interface number can be different but t...

Page 29: ...y way to modify it is to reload the software Enter network uplink type 1 4 1 Ports 1 2 carry all management control and data vlans 2 Ports 1 2 management and control ports 3 6 data 3 Ports 1 2 management ports 3 6 control and data 4 Ports 1 2 management ports 3 4 control ports 5 6 data 5 Flexible 3 4 When asked enter the VLAN ID for the control VLAN Enter control vlan 1 3967 4048 4093 50 5 When as...

Page 30: ...he appliance Continue with Out of band mgmt0 management configuration yes no y yes Mgmt0 IPv4 address 10 29 172 106 13 When asked to configure the default gateway answer yes Configure the default gateway yes no y yes IPv4 address of the default gateway 10 29 172 1 14 When asked to configure advanced IP options answer no Configure Advanced IP options yes no n no 15 When asked to enable the Telnet s...

Page 31: ...sco Nexus 1100 Series VSA With the primary Cisco Nexus 1100 Series VSA configured power on the secondary Cisco Nexus 1100 Series VSA and follow these steps 1 When asked enter and confirm the administrator password System Admin Account Setup Enter the password for admin Confirm the password for admin 2 When asked enter the high availability role Enter HA role primary secondary secondary 3 When aske...

Page 32: ...cy state Standby Supervisor state HA standby Internal state HA standby Instantiate the Cisco Nexus 1000V Series VSM Verify that the Cisco Nexus 1000V Series VSM ISO is in the bootflash directory The Cisco Nexus 1100 Series ships with an image that is the latest at the time of shipping If a new VSM image has become available since then copy the image to the booflash memory using one of the supporte...

Page 33: ...onfig virtual service blade VSM1 Nexus1110 config vsb config virtual service blade type new nexus 1000v 4 2 1 SV2 1 1 iso Nexus1110 config vsb config interface control vlan 50 Nexus1110 config vsb config interface packet vlan 50 Nexus1110 config vsb config no shutdown Nexus1110 config vsb config enable Nexus1110 config vsb config enable Enter vsb image nexus 1000v 4 2 1 SV2 1 1 iso Hit enter Enter...

Page 34: ...primary and secondary VSMs are up and operational To do so use the configuration and steps presented here Nexus 1110 login virtual service blade VSM1 Note You will need to press the Enter key to see the login prompt Nexus 1000v Switch VSM 1110 login admin Password Cisco Nexus Operating System NX OS Software TAC support http www cisco com tac Copyright c 2002 2012 Cisco Systems Inc All rights reser...

Page 35: ... to VC Control type multicast No Complete the Cisco Nexus 1000V Series Installation To complete the installation of the Cisco Nexus 1000V Series the VSM needs to be registered with VMware vCenter and the VEM needs to be installed on the hosts To complete these actions you can use the Cisco Nexus 1000V Series Installer App utility The Installer App utility is bundled in the cisco Nexus 1000V Series...

Page 36: ...edentials The next screen accepts the VSM details and the data center object within VMware vCenter in which the hosts that the VSM will control reside Enter the IP address for the VSM VSB that was created on the Cisco Nexus 1100 Series VSA and the credentials to log into the VSM A single Cisco Nexus 1000V Series instance can span only one VMware vCenter logical data center object select the data c...

Page 37: ...reserved This document is Cisco Public Information Page 37 of 39 Figure 25 Installer App VSM Credentials After the VSM successfully registers with VMware vCenter the summary screen will be displayed Figure 26 Figure 26 Installer App Summary Screen ...

Page 38: ...low the steps documented in the configuration guide For More Information Cisco Nexus 1100 Series Technical Documentation Release notes Installation workflow Hardware installation guide Software installation and upgrade guide Cisco Nexus 1010 deployment guide Configuration guide Command reference Password recovery guide Cisco Nexus 1100 and 1000V Series technical documentation Additional Informatio...

Page 39: ... 2013 Cisco and or its affiliates All rights reserved This document is Cisco Public Information Page 39 of 39 Cisco DCNM LAN VSB http www cisco com go dcnm Printed in USA C07 720862 01 06 13 ...

Reviews: