Hướng dẫn cấu hình Nexus Switch
Phần 6. Cấu hình Private VLAN.
Phần 7. Cấu hình STP.
Phần 8. Cấu hình Storm Control.
Phần 9. Cấu hình CDP & LLDP.
Phần 10. Cấu hình UDLD.
Phần 11. Cấu hình VTP.
Phần 12. Cấu hình EtherChannel.
Cấu hình EtherChannel sử dụng giao thức LACP.
hostname NX2 feature lacp interface ethernet 1/1 – 2 switchport mode trunk channel-group 12 mode active exit interface ethernet 1/3 – 4 switchport mode trunk channel-group 1 mode active exit
hostname NX1 feature lacp interface ethernet 1/1 – 2 switchport mode trunk channel-group 12 mode active exit
hostname Sw1 interface range f1/0/1 , f1/0/2 switchport trunk encapsulation dot1q switchport mode trunk channel-protocol lacp channel-group 1 mode active exit vlan 10 name LAN10 exit interface f1/0/3 switchport mode access switchport access vlan 10 spanning-tree portfast exit
NX2# show port-channel summary Flags: D - Down P - Up in port-channel (members) I - Individual H - Hot-standby (LACP only) s - Suspended r - Module-removed S - Switched R - Routed U - Up (port-channel) M - Not in use. Min-links not met -------------------------------------------------------------------------------- Group Port- Type Protocol Member Ports Channel -------------------------------------------------------------------------------- 12 Po12(SU) Eth LACP Eth1/1(P) Eth1/2(P) NX2#
NX2# show port-channel traffic ChanId Port Rx-Ucst Tx-Ucst Rx-Mcst Tx-Mcst Rx-Bcst Tx-Bcst ------ --------- ------- ------- ------- ------- ------- ------- 12 Eth1/1 0.0% 0.0% 50.20% 92.65% 0.0% 0.0% 12 Eth1/2 0.0% 0.0% 49.79% 7.34% 0.0% 0.0% NX2#
NX2# show port-channel usage Total 1 port-channel numbers used ============================================ Used : 12 Unused: 1 - 11 , 13 - 4096 (some numbers may be in use by SAN port channels) NX2#
NX2# show lacp port-channel port-channel12 System Mac=d8-67-d9-e9-3a-81 Local System Identifier=0x8000,d8-67-d9-e9-3a-81 Admin key=0xb Operational key=0xb Partner System Identifier=0x8000,f4-4e-5-b3-36-bc Operational key=0xb Max delay=0 Aggregate or individual=1 Member Port List=1-2 NX2#
NX2# show lacp neighbor Flags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUs A - Device is in Active mode P - Device is in Passive mode port-channel12 neighbors Partner's information Partner Partner Partner Port System ID Port Number Age Flags Eth1/1 32768,f4-4e-5-b3-36-bc 0x101 5599 SA LACP Partner Partner Partner Port Priority Oper Key Port State 32768 0xb 0x3d Partner's information Partner Partner Partner Port System ID Port Number Age Flags Eth1/2 32768,f4-4e-5-b3-36-bc 0x102 5599 SA LACP Partner Partner Partner Port Priority Oper Key Port State 32768 0xb 0x3d NX2#
NX2# show port-channel load-balance Port Channel Load-Balancing Configuration: System: source-dest-ip Port Channel Load-Balancing Addresses Used Per-Protocol: Non-IP: source-dest-mac IP: source-dest-ip NX2#
NX2# show port-channel database port-channel12 Last membership update is successful 2 ports in total, 2 ports up First operational port is Ethernet1/1 Age of the port-channel is 0d:01h:34m:20s Time since last bundle is 0d:01h:34m:20s Last bundled member is Ethernet1/2 Ports: Ethernet1/1 [active ] [up] * Ethernet1/2 [active ] [up] NX2#
NX2# show feature Feature Name Instance State -------------------- -------- -------- amt 1 disabled bfd 1 disabled bfd_app 1 disabled bgp 1 disabled cts 1 disabled dhcp 1 disabled dot1x 1 disabled eigrp 1 disabled eigrp 2 disabled eigrp 3 disabled eigrp 4 disabled evmed 1 disabled glbp 1 disabled hsrp_engine 1 disabled interface-vlan 1 disabled isis 1 disabled isis 2 disabled isis 3 disabled isis 4 disabled lacp 1 enabled ldap 1 disabled lldp 1 enabled msdp 1 disabled nat 1 disabled oim 1 disabled onep 1 disabled ospf 1 disabled ospf 2 disabled ospf 3 disabled ospf 4 disabled ospfv3 1 disabled ospfv3 2 disabled ospfv3 3 disabled ospfv3 4 disabled pbr 1 disabled pim 1 disabled poe 1 disabled private-vlan 1 disabled privilege 1 disabled ptp 1 disabled rip 1 disabled rip 2 disabled rip 3 disabled rip 4 disabled scheduler 1 disabled scpServer 1 disabled sflow 1 disabled sshServer 1 enabled tacacs 1 disabled telnetServer 1 enabled tunnel 1 disabled udld 1 disabled vnseg_vlan 1 disabled vpc 1 disabled vrrp 1 disabled vtp 1 disabled vxlangw 1 disabled NX2#
NX2# show interface port-channel 12 port-channel12 is up Hardware: Port-Channel, address: d867.d9e9.3a48 (bia d867.d9e9.3a48) MTU 1500 bytes, BW 2000000 Kbit, DLY 10 usec reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA Port mode is trunk full-duplex, 1000 Mb/s Input flow-control is off, output flow-control is off Switchport monitor is off EtherType is 0x8100 Members in this channel: Eth1/1, Eth1/2 Last clearing of "show interface" counters never 1 interface resets 30 seconds input rate 64 bits/sec, 0 packets/sec 30 seconds output rate 584 bits/sec, 1 packets/sec Load-Interval #2: 5 minute (300 seconds) input rate 304 bps, 0 pps; output rate 568 bps, 1 pps RX 0 unicast packets 344 multicast packets 0 broadcast packets 344 input packets 77375 bytes 0 jumbo packets 0 storm suppression bytes 0 runts 0 giants 0 CRC 0 no buffer 0 input error 0 short frame 0 overrun 0 underrun 0 ignored --More--
Nếu các Port không đồng nhất tham số “campatibility-parameters” thì sẽ không thiết lập EtherChannel với nhau được.
NX2# show port-channel compatibility-parameters * port mode Members must have the same port mode configured. * port mode Members must have the same port mode configured, either E,F or AUTO. If they are configured in AUTO port mode, they have to negotiate E or F mode when they come up. If a member negotiates a different mode, it will be suspended. * speed Members must have the same speed configured. If they are configured in AUTO speed, they have to negotiate the same speed when they come up. If a member negotiates a different speed, it will be suspended. * MTU Members have to have the same MTU configured. This only applies to ethernet port-channel. * shut lan Members have to have the same shut lan configured. This only applies to ethernet port-channel. * MEDIUM Members have to have the same medium type configured. This only applies to ethernet port-channel. * Span mode Members must have the same span mode. * load interval Member must have same load interval configured. * negotiate Member must have same negotiation configured. * sub interfaces Members must not have sub-interfaces. * Duplex Mode Members must have same Duplex Mode configured. * Ethernet Layer Members must have same Ethernet Layer (switchport/no-switchport) configured. * Span Port Members cannot be SPAN ports. * Storm Control Members must have same storm-control configured. * Flow Control Members must have same flowctrl configured. * Capabilities Members must have common capabilities. * Capabilities speed Members must have common speed capabilities. * Capabilities duplex Members must have common speed duplex capabilities. * rate mode Members must have the same rate mode configured. * Capabilities FabricPath Members must have common fabricpath capability. * Port is PVLAN host Port Channel cannot be created for PVLAN host * 1G port is not capable of acting as peer-link Members must be 10G to become part of a vPC peer-link. * EthType Members must have same EthType configured. * shared interface Members can not be shared-interfaces. * Capabilities SpanDest Members must be capable of span destination configuration * Sflow enabled port Members cannot be Sflow enabled ports * port Members port VLAN info. * port Members port does not exist. * switching port Members must be switching port, Layer 2. * port access VLAN Members must have the same port access VLAN. * port native VLAN Members must have the same port native VLAN. * port allowed VLAN list Members must have the same port allowed VLAN list. * port Voice VLAN Members must not have voice vlan configured. * All HIF member ports not in same pinning group All HIF member ports not in same pinning group * Members in multiple FEX Members must belong to same FEX. * Members are of different type Members must of same interface type. * vPC cannot be defined across more than 2 FEXes vPC cannot be defined across more than 2 FEXes * Max members on FEX exceeded Max members on FEX exceeded * vPC cannot be defined across ST and AA FEX vPC cannot be defined across ST and AA FEX * Untagged Cos Params Members must have the same untagged cos. * Priority Flow Control Params Members must have the same priority flow control parameters. * Untagged Cos Params Members must have the same untagged cos. * Priority Flow Control Params Members must have the same priority flow control parameters. * queuing policy configured on port-channel queuing service-policy not allowed on RW HIF-ports and RW HIF-Po. * Port priority-flow-control PFC config should be the same for all the members * Port-channel with STP configuration, not compatible with HIF HIF ports cannot be bound to port-channel with STP configuration * Port Security policy Members must have the same port-security enable status as port-channel * Dot1x policy Members must have host mode as multi-host with no mab configuration. Dot1X cannot be enabled on members when Port Security is configured on port channel * PC Queuing policy Queuing policy for the PC should be same as system queuing policy * PVLAN port config Members must have same PVLAN port configuration. * Emulated switch port type policy vPC ports in emulated switch complex should be L2MP capable. * VFC bound to FCoE capable port channel Port Channels that have VFCs bound to them cannot have non fcoe capable member * VFC bound to member port of port channel. Fail to add additional interface to port channel * VFC bound to FCoE capable port channel Port Channels that have VFCs bound to them cannot have non fcoe licensed member * vfc bound to member port of hif po, Two members cannot be on the same fex Fail to add additional interface to port channel * VFCs bound to both port channel and new member port(s). Fail to add additional interface to port channel * Flexlink config Features configured on member interface must be supportable by Flexlink. * Fex ports for span Port-Channel is already a SPAN source. Cannot add FEX ports connected through Ricard to this PC NX2#
NX2# show resource Resource Min Max Used Unused Avail -------- --- --- ---- ------ ----- vlan 16 4094 7 9 4041 monitor-session 0 4 0 0 4 vrf 2 4096 2 0 4094 port-channel 0 104 1 0 103 u4route-mem 64 64 1 63 63 u6route-mem 24 24 1 23 23 m4route-mem 58 58 1 57 57 m6route-mem 8 8 1 7 7 bundle-map 0 104 1 0 103 NX2#