Hướng dẫn cấu hình Nexus Switch

Phần 6. Cấu hình Private VLAN.

Phần 7. Cấu hình STP.

Phần 8. Cấu hình Storm Control.

Phần 9. Cấu hình CDP & LLDP.

Phần 10. Cấu hình UDLD.

Phần 11. Cấu hình VTP.

Phần 12. Cấu hình EtherChannel.

Cấu hình EtherChannel sử dụng giao thức LACP.

hostname NX2

feature lacp
interface ethernet 1/1 – 2
  switchport mode trunk
  channel-group 12 mode active
  exit

interface ethernet 1/3 – 4
  switchport mode trunk
  channel-group 1 mode active
  exit
hostname NX1

feature lacp
interface ethernet 1/1 – 2
  switchport mode trunk
  channel-group 12 mode active
  exit
hostname Sw1

interface range f1/0/1 , f1/0/2
  switchport trunk encapsulation dot1q
  switchport mode trunk
  channel-protocol lacp
  channel-group 1 mode active
  exit

vlan 10
  name LAN10
  exit
interface f1/0/3
  switchport mode access
  switchport access vlan 10
  spanning-tree portfast
  exit
NX2# show port-channel summary 
Flags:  D - Down        P - Up in port-channel (members)
        I - Individual  H - Hot-standby (LACP only)
        s - Suspended   r - Module-removed
        S - Switched    R - Routed
        U - Up (port-channel)
        M - Not in use. Min-links not met
--------------------------------------------------------------------------------
Group Port-       Type     Protocol  Member Ports
      Channel
--------------------------------------------------------------------------------
12    Po12(SU)    Eth      LACP      Eth1/1(P)    Eth1/2(P)    
NX2#
NX2# show port-channel traffic 
ChanId      Port Rx-Ucst Tx-Ucst Rx-Mcst Tx-Mcst Rx-Bcst Tx-Bcst
------ --------- ------- ------- ------- ------- ------- -------
    12    Eth1/1    0.0%    0.0%  50.20%  92.65%    0.0%    0.0%
    12    Eth1/2    0.0%    0.0%  49.79%   7.34%    0.0%    0.0%
NX2#
NX2# show port-channel usage 
Total 1 port-channel numbers used
============================================
Used  :   12
Unused:   1 - 11 , 13 - 4096
          (some numbers may be in use by SAN port channels)

NX2#
NX2# show lacp port-channel 
port-channel12
  System Mac=d8-67-d9-e9-3a-81
  Local System Identifier=0x8000,d8-67-d9-e9-3a-81
  Admin key=0xb
  Operational key=0xb
  Partner System Identifier=0x8000,f4-4e-5-b3-36-bc
  Operational key=0xb
  Max delay=0
  Aggregate or individual=1
  Member Port List=1-2
NX2#
NX2# show lacp neighbor 
Flags:  S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUs
        A - Device is in Active mode       P - Device is in Passive mode
port-channel12 neighbors
Partner's information
            Partner                Partner                     Partner
Port        System ID              Port Number     Age         Flags
Eth1/1      32768,f4-4e-5-b3-36-bc 0x101           5599        SA

            LACP Partner           Partner                     Partner
            Port Priority          Oper Key                    Port State
            32768                  0xb                         0x3d

Partner's information
            Partner                Partner                     Partner
Port        System ID              Port Number     Age         Flags
Eth1/2      32768,f4-4e-5-b3-36-bc 0x102           5599        SA

            LACP Partner           Partner                     Partner
            Port Priority          Oper Key                    Port State
            32768                  0xb                         0x3d


NX2#
NX2# show port-channel load-balance 

Port Channel Load-Balancing Configuration:
System: source-dest-ip

Port Channel Load-Balancing Addresses Used Per-Protocol:
Non-IP: source-dest-mac
IP: source-dest-ip 
	
NX2#
NX2# show port-channel database 
port-channel12
    Last membership update is successful
    2 ports in total, 2 ports up
    First operational port is Ethernet1/1
    Age of the port-channel is 0d:01h:34m:20s
    Time since last bundle is 0d:01h:34m:20s
    Last bundled member is Ethernet1/2
    Ports:   Ethernet1/1     [active ] [up] *
             Ethernet1/2     [active ] [up]

NX2#
NX2# show feature
Feature Name          Instance  State   
--------------------  --------  --------
amt                   1         disabled
bfd                   1         disabled
bfd_app               1         disabled
bgp                   1         disabled
cts                   1         disabled
dhcp                  1         disabled
dot1x                 1         disabled
eigrp                 1         disabled
eigrp                 2         disabled
eigrp                 3         disabled
eigrp                 4         disabled
evmed                 1         disabled
glbp                  1         disabled
hsrp_engine           1         disabled
interface-vlan        1         disabled
isis                  1         disabled
isis                  2         disabled
isis                  3         disabled
isis                  4         disabled
lacp                  1         enabled 
ldap                  1         disabled
lldp                  1         enabled 
msdp                  1         disabled
nat                   1         disabled
oim                   1         disabled
onep                  1         disabled
ospf                  1         disabled
ospf                  2         disabled
ospf                  3         disabled
ospf                  4         disabled
ospfv3                1         disabled
ospfv3                2         disabled
ospfv3                3         disabled
ospfv3                4         disabled
pbr                   1         disabled
pim                   1         disabled
poe                   1         disabled
private-vlan          1         disabled
privilege             1         disabled
ptp                   1         disabled
rip                   1         disabled
rip                   2         disabled
rip                   3         disabled
rip                   4         disabled
scheduler             1         disabled
scpServer             1         disabled
sflow                 1         disabled
sshServer             1         enabled 
tacacs                1         disabled
telnetServer          1         enabled 
tunnel                1         disabled
udld                  1         disabled
vnseg_vlan            1         disabled
vpc                   1         disabled
vrrp                  1         disabled
vtp                   1         disabled
vxlangw               1         disabled
NX2#
NX2# show interface port-channel 12
port-channel12 is up
  Hardware: Port-Channel, address: d867.d9e9.3a48 (bia d867.d9e9.3a48)
  MTU 1500 bytes, BW 2000000 Kbit, DLY 10 usec
  reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA
  Port mode is trunk
  full-duplex, 1000 Mb/s
  Input flow-control is off, output flow-control is off
  Switchport monitor is off 
  EtherType is 0x8100 
  Members in this channel: Eth1/1, Eth1/2
  Last clearing of "show interface" counters never
  1 interface resets
  30 seconds input rate 64 bits/sec, 0 packets/sec
  30 seconds output rate 584 bits/sec, 1 packets/sec
  Load-Interval #2: 5 minute (300 seconds)
    input rate 304 bps, 0 pps; output rate 568 bps, 1 pps
  RX
    0 unicast packets  344 multicast packets  0 broadcast packets
    344 input packets  77375 bytes
    0 jumbo packets  0 storm suppression bytes
    0 runts  0 giants  0 CRC  0 no buffer
    0 input error  0 short frame  0 overrun   0 underrun  0 ignored
--More--

Nếu các Port không đồng nhất tham số “campatibility-parameters” thì sẽ không thiết lập EtherChannel với nhau được.

NX2# show port-channel compatibility-parameters
* port mode
Members must have the same port mode configured.

* port mode
Members must have the same port mode configured, either E,F or AUTO. If 
they are configured in AUTO port mode, they have to negotiate E or F mode 
when they come up. If a member negotiates a different mode, it will be 
suspended.

* speed
Members must have the same speed configured. If they are configured in AUTO 
speed, they have to negotiate the same speed when they come up. If a member 
negotiates a different speed, it will be suspended.

* MTU
Members have to have the same MTU configured. This only applies to ethernet 
port-channel.

* shut lan
Members have to have the same shut lan configured. This only applies to 
ethernet port-channel.

* MEDIUM
Members have to have the same medium type configured. This only applies to 
ethernet port-channel.

* Span mode
Members must have the same span mode.

* load interval
Member must have same load interval configured.

* negotiate
Member must have same negotiation configured.

* sub interfaces
Members must not have sub-interfaces.

* Duplex Mode
Members must have same Duplex Mode configured.

* Ethernet Layer
Members must have same Ethernet Layer (switchport/no-switchport) configured.

* Span Port
Members cannot be SPAN ports.

* Storm Control
Members must have same storm-control configured.

* Flow Control
Members must have same flowctrl configured.

* Capabilities
Members must have common capabilities.

* Capabilities speed
Members must have common speed capabilities.

* Capabilities duplex
Members must have common speed duplex capabilities.

* rate mode
Members must have the same rate mode configured.

* Capabilities FabricPath
Members must have common fabricpath capability.

* Port is PVLAN host
Port Channel cannot be created for PVLAN host

* 1G port is not capable of acting as peer-link
Members must be 10G to become part of a vPC peer-link.

* EthType
Members must have same EthType configured.

* shared interface
Members can not be shared-interfaces.

* Capabilities SpanDest
Members must be capable of span destination configuration

* Sflow enabled port
Members cannot be Sflow enabled ports

* port
Members port VLAN info.

* port
Members port does not exist.

* switching port
Members must be switching port, Layer 2.

* port access VLAN
Members must have the same port access VLAN.

* port native VLAN
Members must have the same port native VLAN.

* port allowed VLAN list
Members must have the same port allowed VLAN list.

* port Voice VLAN 
Members must not have voice vlan configured.

* All HIF member ports not in same pinning group
All HIF member ports not in same pinning group

* Members in multiple FEX
Members must belong to same FEX.

* Members are of different type
Members must of same interface type.

* vPC cannot be defined across more than 2 FEXes 
vPC cannot be defined across more than 2 FEXes 

* Max members on FEX exceeded 
Max members on FEX exceeded 

* vPC cannot be defined across ST and AA FEX 
vPC cannot be defined across ST and AA FEX 

* Untagged Cos Params
Members must have the same untagged cos.

* Priority Flow Control Params
Members must have the same priority flow control parameters.

* Untagged Cos Params
Members must have the same untagged cos.

* Priority Flow Control Params
Members must have the same priority flow control parameters.

* queuing policy configured on port-channel
queuing service-policy not allowed on RW HIF-ports and RW HIF-Po.

* Port priority-flow-control
PFC config should be the same for all the members

* Port-channel with STP configuration, not compatible with HIF
HIF ports cannot be bound to port-channel with STP configuration

* Port Security policy 
Members must have the same port-security enable status as port-channel

* Dot1x policy
Members must have host mode as multi-host with no mab configuration. Dot1X 
cannot be enabled on members when Port Security is configured on port 
channel

* PC Queuing policy
Queuing policy for the PC should be same as system queuing policy

* PVLAN port config
Members must have same PVLAN port configuration.

* Emulated switch port type policy
vPC ports in emulated switch complex should be L2MP capable.

* VFC bound to FCoE capable port channel
Port Channels that have VFCs bound to them cannot have non fcoe capable 
member

* VFC bound to member port of port channel.
 Fail to add additional interface to port channel

* VFC bound to FCoE capable port channel
Port Channels that have VFCs bound to them cannot have non fcoe licensed 
member

* vfc bound to member port of hif po, Two members cannot be on the same fex
 Fail to add additional interface to port channel

* VFCs bound to both port channel and new member port(s).
 Fail to add additional interface to port channel

* Flexlink config
Features configured on member interface must be supportable by Flexlink.

* Fex ports for span
Port-Channel is already a SPAN source. Cannot add FEX ports connected 
through                         Ricard to this PC

NX2#
NX2# show resource

     Resource         Min       Max       Used      Unused    Avail    
     --------         ---       ---       ----      ------    -----    
     vlan             16        4094      7         9         4041     
     monitor-session  0         4         0         0         4        
     vrf              2         4096      2         0         4094     
     port-channel     0         104       1         0         103      
     u4route-mem      64        64        1         63        63       
     u6route-mem      24        24        1         23        23       
     m4route-mem      58        58        1         57        57       
     m6route-mem      8         8         1         7         7        
     bundle-map       0         104       1         0         103      

NX2#

Đặng Đình Công

Mình là Đặng Đình Công. Công việc hiện tại của mình là quản trị viên hệ thống mạng máy tính. Hiện tại mình đang học, nghiên cứu và làm việc về mảng hệ thống và bảo mật Microsoft, Cisco, ảo hóa VMware,... Blog được lập ra với phương diện cá nhân nên chắc sẽ không tránh khỏi nhiều sai sót. Mong được sự góp ý của tất cả các bạn.

You may also like...