Manuals / Cisco Systems / Computer Equipment / Switch

Cisco Systems N3KC3064TFAL3, N3KC3048TP1GE manual Americas Headquarters, Cisco Systems, Inc

Models: N3KC3064TFAL3 N3KC3048TP1GE

1 164

Download 164 pages 5.98 Kb

Page 1

Image 1

Cisco Nexus 3000 NX-OS Layer 2 Switching Configuration Guide, Release 5.0(3)U3(1)

First Published: February 29, 2012

Last Modified: March 22, 2012

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive San Jose, CA 95134-1706

USA http://www.cisco.com Tel: 408 526-4000

800 553-NETS (6387) Fax: 408 527-0883

Text Part Number: OL-26590-01

Page 1

Image 1

Cisco Systems N3KC3064TFAL3 manual Americas Headquarters, First Published February 29 Last Modified March 22

Contents

First Published February 29 Last Modified March 22 Americas HeadquartersCisco Systems, Inc 170 West Tasman Drive San Jose, CACisco Systems, Inc. All rights reserved C O N T E N T S Obtaining Documentation and Submitting a Service RequestAudience Document Conventions Related Documentation for Nexus 3000 Series NX-OS SoftwareAbout the Error-Disabled State Default CDP ConfigurationAbout the Debounce Timer Parameters About MTU ConfigurationConfiguring VTP Configuring a VLAN as a Management SVIVerifying VLAN Configuration Configuring a Private VLANConfiguring Trunk Ports Configuring Access and Trunk InterfacesVerifying Interface Configuration Enabling Store-and-Forward Switching Reenabling Cut-Through SwitchingForwarding State Disabled State Summary of Port States Protocol Timers Port Roles Port StatesConfiguring Rapid PVST+ Enabling Rapid PVST+ Enabling Rapid PVST+ per VLAN Configuring the Root Bridge IDConfiguring MST MST Configuration Guidelines Enabling MST MST Overview MST Regions MST BPDUs MST Configuration InformationEntering MST Configuration Mode Specifying the MST Name Specifying the MST Configuration Revision NumberConfiguring STP Extensions Verifying MST ConfigurationsSTP Extensions Configuration Guidelines Configuring Spanning Tree Port Types GloballyConfiguring IGMP Snooping Parameters Verifying the MAC Address ConfigurationVerifying IGMP Snooping Configuration Configuring Traffic Storm ControlPreface Obtaining Documentation and Submitting a Service Request, pageAudience Document ConventionsConvention Related Documentation for Nexus 3000 Series NX-OS SoftwareDescription ConventionConfiguration Guides Installation and Upgrade GuidesError and System Messages Release NotesObtaining Documentation and Submitting a Service Request New and Changed Information for this Release FeatureC H A P T E R New and Changed Information for this Release, pageNew and Changed Information for this Release New and Changed Information for this ReleaseOL-26590-01 Layer 2 Ethernet Switching Overview, page VLANs, page Layer 2 Ethernet Switching OverviewOverview VLANsSpanning Tree Private VLANsSTP Overview STP Extensions Rapid PVST+OL-26590-01 Overview STP ExtensionsAbout the Interface Command Configuring Ethernet InterfacesConfiguring Ethernet Interfaces, page Default Physical Ethernet Settings , pageAbout the Unidirectional Link Detection Parameter UDLD Aggressive and Nonaggressive Modes Default UDLD ConfigurationFeature Default CDP Configuration About the Error-Disabled StateAbout Interface Speed About the Cisco Discovery ProtocolAbout the Debounce Timer Parameters Configuring Ethernet InterfacesAbout MTU Configuration About Port ProfilesProcedure Configuring the UDLD ModeCommand or Action switch# configure terminalrunning-config bootflash Changing an Interface Port Moderunning-config startup-config profile portmode portmodeProcedure Configuring Interface SpeedCommand or Action switch# configure terminalProcedure Disabling Link NegotiationCommand or Action Command or Actionadvertise v1 Configuring the CDP Characteristicsdevice-id mac-address serial-number system-nameProcedure Enabling or Disabling CDPCommand or Action Command or Actionconfig t Enabling the Error-Disabled Detectionerrdisable detect cause all link-flap show interface status err-disabledConfiguring the Error-Disabled Recovery Interval Enabling the Error-Disabled RecoveryEnters configuration mode ProcedureConfiguring the Description Parameter Configuring the Debounce Timererrdisable recovery interval interval Step 3 show interface status err-disabledDisabling and Restarting Ethernet Interfaces Displaying Interface InformationProcedure Command or Actionswitch# show interface type slot / port Commandswitch# show interface type slot / port capabilities switch# show interface type slot / port transceiverDisplaying Input Packet Discard Information Default Setting Default Physical Ethernet SettingsParameter OL-26590-01 Configuring Ethernet Interfaces Default Physical Ethernet SettingsOL-26590-01 Configuring Ethernet Interfaces Default Physical Ethernet SettingsInformation About VLANs, page Configuring a VLAN, page Configuring VLANsInformation About VLANs Understanding VLANsVLAN Ranges VLANs Numbers Creating, Deleting, and Modifying VLANsRange UsageAbout the VLAN Trunking Protocol Configuring a VLANCreating and Deleting a VLAN Guidelines and Limitations for VTPProcedure Configuring a VLANCommand or Action switch# configure terminalAdding Ports to a VLAN switchconfig# interface ethernetactive suspend Procedureswitchconfig-if# switchport access vlan Configuring a VLAN as a Routed SVIconfigure terminal Enters global configuration modeConfiguring VTP Configuring a VLAN as a Management SVICreates a VLAN interface SVI and configures the Copies the running configuration to the startupshow vtp password vtp passwordcopy running-config startup-configswitch# show running-config vlan vlanid vlanrange Verifying VLAN Configurationswitch# show vlan brief id vlanid vlanrange name name summaryConfiguring a Private VLAN, page Configuring Private VLANsVerifying the Private VLAN Configuration, page Information About Private VLANsPrivate VLAN Ports Primary and Secondary VLANs in Private VLANsPrimary, Isolated, and Community Private VLANs Associating Primary and Secondary VLANs Private VLAN Isolated Trunks Private VLAN Promiscuous TrunksBroadcast Traffic in Private VLANs Private VLAN Port Isolationswitchconfig# feature private-vlan Configuring a Private VLANGuidelines and Limitations for Private VLANs Enabling Private VLANsAssociating Secondary VLANs with a Primary Private VLAN Configuring a VLAN as a Private VLANcommunity isolated primary ProcedureProcedure associationCommand or Action switch# configure terminalConfiguring an Interface as a Private VLAN Promiscuous Port Configuring an Interface as a Private VLAN Host Portswitchconfig-if# switchport private-vlan private-vlan hostConfiguring an Isolated Trunk Port Configuring a Promiscuous Trunk PortConfiguring the Allowed VLANs for PVLAN Trunking Ports private-vlan promiscuousConfiguring Native 802.1Q VLANs on Private VLANs Verifying the Private VLAN Configurationswitch# show feature switch# show interface switchportOL-26590-01 Configuring Private VLANs Verifying the Private VLAN ConfigurationInformation About Access and Trunk Interfaces Configuring Access and Trunk InterfacesUnderstanding Access and Trunk Interfaces Information About Access and Trunk Interfaces, pageFigure 5 Devices in a Trunking Environment Understanding IEEE 802.1Q EncapsulationFigure 6 Header without and with 802.1Q Tag Included Understanding Access VLANsUnderstanding Allowed VLANs Understanding the Native VLAN ID for Trunk PortsUnderstanding Native 802.1Q VLANs Configuring a LAN Interface as an Ethernet Access Port Configuring Access and Trunk Interfacesmode access trunk VLAN, use the switchport access vlan commandConfiguring Trunk Ports Configuring Access Host PortsProcedure ProcedureConfiguring the Allowed VLANs for Trunking Ports Configuring the Native VLAN for 802.1Q Trunking Portsspecified trunk, use the switchport trunk allowed vlan port-channel numberStep 1 switch# configure terminal Configuring Native 802.1Q VLANsallowed vlan vlan-list all none add except none remove vlan-list Procedureswitchconfig# no vlan dot1q tag Verifying Interface Configurationswitch# show vlan dot1q tag native switch# show interfaceVerifying Interface Configuration Configuring Access and Trunk InterfacesOL-26590-01 Information About Switching Modes Configuring Switching ModesInformation About Switching Modes, page Guidelines and Limitations for Switching Modes, pageLicensing Requirements for Switching Modes Guidelines and Limitations for Switching ModesCut-Through Switching Mode Guidelines and Limitations Store-and-Forward Switching Mode Guidelines and LimitationsConfiguring Switching Modes Default Settings for Switching ModesEnabling Store-and-Forward Switching Reenabling Cut-Through SwitchingFeature Name Feature History for Switching ModesReleases InformationInformation About Rapid PVST+, page Configuring Rapid PVST+, page Configuring Rapid PVST+Verifying Rapid PVST+ Configurations, page Information About Rapid PVST+Understanding the Bridge ID Understanding How a Topology is CreatedBridge Priority Value STP MAC Address Allocation Extended System IDBridge Priority Value 8192Understanding BPDUs Creating the Spanning Tree Topology Election of the Root BridgeFigure 8 Spanning Tree Topology Rapid PVST+ Overview Understanding Rapid PVST+Rapid PVST+ BPDUs Figure 10 Proposal and Agreement Handshaking for Rapid Convergence Proposal and Agreement HandshakePort Roles Protocol TimersVariable DescriptionRapid PVST+ Port State Overview Port StatesLearning State Blocking StateForwarding State Synchronization of Port Roles Disabled StateSummary of Port States Operational StatusProcessing Superior BPDU Information Port Cost Spanning-Tree Dispute MechanismProcessing Inferior BPDU Information BandwidthRapid PVST+ Interoperation with Legacy 802.1D STP Rapid PVST+ and IEEE 802.1Q TrunksPort Priority BandwidthRapid PVST+ Interoperation with 802.1s MST Configuring Rapid PVST+Enabling Rapid PVST+ switch# configure mode rapid-pvstEnabling Rapid PVST+ per VLAN terminalCommand or Action Configuring the Root Bridge IDPurpose Procedure Configuring a Secondary Root BridgeCommand or Action Step 1 switch# configure terminalvlan vlan-list port-priority priority Configuring the Rapid PVST+ Port PriorityProcedure ProcedureConfiguring the Rapid PVST+ Bridge Priority of a VLAN Configuring the Rapid PVST+ Pathcost Method and Port Costpathcost method long short vlan vlan-id cost value autoswitchconfig# spanning-tree vlan Configuring the Rapid PVST+ Hello Time for a VLANProcedure ProcedureConfiguring the Rapid PVST+ Maximum Age Time for a VLAN Configuring the Rapid PVST+ Forward Delay Time for a VLANSpecifying the Link Type Procedureswitch# clear spanning-tree detected-protocol Verifying Rapid PVST+ Configurationsswitch# show running-config spanning-tree all Restarting the ProtocolCommand switch# show spanning-tree optionsConfiguring Rapid PVST+ Verifying Rapid PVST+ Configurations switch# show spanning-tree briefOL-26590-01 Configuring Rapid PVST+ Verifying Rapid PVST+ ConfigurationsInformation About MST, page Configuring MST, page Configuring Multiple Spanning TreeVerifying MST Configurations, page Information About MSTMST BPDUs MST RegionsFigure 14 MST BPDU with M-Records for MSTIs IST, CIST, and CST MST Configuration InformationIST, CIST, and CST Overview Spanning Tree Operations Between MST Regions Spanning Tree Operation Within an MST RegionFigure 15 MST Regions, CIST Regional Roots, and CST Root MST TerminologyBoundary Ports Hop CountFigure 16 MST Boundary Ports Spanning-Tree Dispute MechanismFigure 17 Detecting a Unidirectional Link Failure Interoperability with IEEE 802.1D Port Cost and Port PriorityMST Configuration Guidelines Configuring MSTInteroperability with Rapid PVST+ Understanding PVST Simulation Enabling MSTswitchconfig# spanning-tree mode mst Entering MST Configuration Modeswitchconfig# no spanning-tree mode mst mst configurationSpecifying the MST Name switchconfig# spanning-tree mstspanning-tree mst ProcedureSpecifying the Configuration on an MST Region Specifying the MST Configuration Revision NumberProcedure ProcedureWhen you map VLANs to an MST instance, the mapping is Command or ActionPurpose StepProcedure Mapping and Unmapping VLANs to MST InstancesCommand or Action switch# configure terminalsynchronize Configuring the Root Bridgemst instance-id root primary Proceduresecondary diameter dia hello-time hello-time Step 3 switchconfig# no spanning-tree mst instance-id rootConfiguring a Secondary Root Bridge ProcedureProcedure Configuring the Port PriorityCommand or Action Command or ActionConfiguring the Switch Priority Configuring the Port CostProcedure Command or Actionhello-time seconds Configuring the Hello TimeProcedure ProcedureConfiguring the Maximum-Aging Time Configuring the Forwarding-Delay TimeProcedure ProcedureConfiguring PVST Simulation Globally Configuring the Maximum-Hop Countmst max-age seconds max-hops hop-countsimulate pvst disable Configuring PVST Simulation Per Portspanning-tree mst simulate pvst global command mst simulate pvst globalCommand or Action ProcedureStep 1 switch# configure terminal Specifying the Link Typeswitch# show running-config spanning-tree all Verifying MST Configurationsswitch# show spanning-tree mst options ProcedureAbout STP Extensions Configuring STP ExtensionsInformation About STP Extensions Understanding STP Port TypesUnderstanding BPDU Guard Understanding Bridge AssuranceSpanning Tree Network Ports Spanning Tree Normal PortsUnderstanding BPDU Filtering ConfigurationBPDU Filtering Global STP Edge PortUnderstanding Root Guard Understanding Loop GuardConfiguration ConfigurationSTP Extensions Configuration Guidelines Configuring STP ExtensionsConfiguring Spanning Tree Port Types Globally Before You Beginport type edge default Configuring Spanning Tree Edge Ports on Specified Interfacesport type network default Procedureport type edge Configuring Spanning Tree Network Ports on Specified InterfacesProcedure Command or Actionport type network Enabling BPDU Guard GloballyProcedure Command or Actionedge bpduguard default switchconfig# spanning-tree port typebpduguard enable disable spanning-tree port type edge bpduguard default commandEnabling BPDU Filtering Globally edge bpdufilter defaultProcedure Command or ActionEnabling BPDU Filtering on Specified Interfaces bpdufilter enable disablebpdufilter ProcedureEnabling Loop Guard Globally loopguard defaultEnabling Loop Guard or Root Guard on Specified Interfaces Procedureguard loop root none Verifying STP Extension ConfigurationProcedure Command or ActionOL-26590-01 Configuring STP Extensions Verifying STP Extension ConfigurationConfiguring Global LLDP Commands Configuring LLDPConfiguring Global LLDP Commands, page Configuring Interface LLDP Commands, pageProcedure holdtime reinit timerCommand or Action Step 1 switch# configure terminaltransmit Configuring Interface LLDP CommandsProcedure Command or ActionThis example shows how to display LLDP counters This example shows how to display LLDP timer informationConfiguring LLDP Configuring Interface LLDP Commands switch# show lldp timers LLDP TimersConfiguring MAC Addresses Configuring the MAC Address TableConfiguring a Static MAC Address Information About MAC Addresses, page Configuring MAC Addresses, pageswitchconfig-# no mac-address-table static Configuring the Aging Time for the MAC TableProcedure Procedureswitchconfig# clear mac-address-table dynamic Verifying the MAC Address Configurationswitch# show mac-address-table aging-time defined in the switchThis example shows how to display the current aging time This example shows how to display the MAC address tableConfiguring the MAC Address Table Verifying the MAC Address ConfigurationConfiguring IGMP Snooping Parameters, page Configuring IGMP SnoopingVerifying IGMP Snooping Configuration, page Information About IGMP SnoopingFigure 18 IGMP Snooping Switch IGMPv1 and IGMPv2IGMP Snooping Querier IGMPv3IGMP Forwarding Parameter Configuring IGMP Snooping ParametersDescription no ip igmp snooping mrouter no ip igmp snooping mrouter vpc-peer-linksnooping Proceduresnooping fast-leave snooping explicit-trackinglast-member-query-interval snooping querier IP-addressswitch# show ip igmp snooping vlan vlan-id Verifying IGMP Snooping Configurationswitch# show ip igmp snooping groups vlan vlan-id detail switch# show ip igmp snooping querier vlan vlan-idOL-26590-01 Configuring IGMP Snooping Verifying IGMP Snooping ConfigurationConfiguring Traffic Storm Control, page Configuring Traffic Storm ControlTraffic Storm Control Example Configuration, page Default Traffic Storm Settings, pageFigure 19 Broadcast Suppression Traffic Storm Guidelines and Limitationsswitchconfig-if# storm-control broadcast Configuring Traffic Storm Controlmulticast unicast level percentage . fraction ProcedureDefault Traffic Storm Settings Traffic Storm Control Example ConfigurationVerifying Traffic Storm Control Configuration switch# show running-config interfaceI N D E Page Page adding ports to