Projet

Général

Profil

NXOS » Historique » Version 26

Laurent GUERBY, 15/03/2018 18:09

1 20 Laurent GUERBY
{{>toc}}
2 20 Laurent GUERBY
3 1 Matthieu Herrb
h1. NXOS
4 1 Matthieu Herrb
5 11 Laurent GUERBY
Cisco Nexus 3064X
6 11 Laurent GUERBY
version 7.0(3)I4(7)
7 1 Matthieu Herrb
8 10 Laurent GUERBY
Voir aussi https://www.grenode.net/Documentation_technique/Machines/kraken/
9 10 Laurent GUERBY
10 21 Laurent GUERBY
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3000/sw/fundamentals/503_U3_1/b_Nexus_3000_Fundamentals_Guide_Release_503_U3_1.pdf
11 18 Laurent GUERBY
12 1 Matthieu Herrb
h2. Interface de management out-of-band
13 1 Matthieu Herrb
14 9 Laurent GUERBY
* n3064a Adresse: 192.168.129.46
15 9 Laurent GUERBY
16 9 Laurent GUERBY
<pre>
17 9 Laurent GUERBY
interface mgmt0
18 9 Laurent GUERBY
  vrf member management
19 9 Laurent GUERBY
  ip address 192.168.129.46/24
20 9 Laurent GUERBY
21 9 Laurent GUERBY
</pre>
22 1 Matthieu Herrb
23 1 Matthieu Herrb
h2. Commandes
24 1 Matthieu Herrb
25 1 Matthieu Herrb
h3. Sauvegarde config 
26 1 Matthieu Herrb
27 1 Matthieu Herrb
<pre>
28 1 Matthieu Herrb
nexus# copy run start
29 1 Matthieu Herrb
</pre>
30 1 Matthieu Herrb
31 1 Matthieu Herrb
Copie via scp
32 1 Matthieu Herrb
33 1 Matthieu Herrb
<pre>
34 1 Matthieu Herrb
nexus# copy run scp://matthieu@192.168.129.1/
35 1 Matthieu Herrb
</pre>
36 1 Matthieu Herrb
37 25 Laurent GUERBY
h3. Passwordless ssh
38 25 Laurent GUERBY
39 25 Laurent GUERBY
<pre>
40 25 Laurent GUERBY
conf t
41 25 Laurent GUERBY
username admin sshkey ssh-rsa AAAA...
42 26 Laurent GUERBY
</pre>
43 25 Laurent GUERBY
44 25 Laurent GUERBY
Ensuite :
45 25 Laurent GUERBY
46 25 Laurent GUERBY
<pre>
47 25 Laurent GUERBY
(echo conf t;echo int e1/42;echo switchport access vlan 3189) |ssh n3064a
48 25 Laurent GUERBY
</pre>
49 25 Laurent GUERBY
50 1 Matthieu Herrb
h3. Config interface
51 1 Matthieu Herrb
52 1 Matthieu Herrb
<pre>
53 1 Matthieu Herrb
nexus# conf t
54 1 Matthieu Herrb
nexus(config)# interface ethernet 1/3
55 1 Matthieu Herrb
nexus(config-if)# switchport mode trunk
56 1 Matthieu Herrb
nexus(config-if)# exit
57 1 Matthieu Herrb
nexus(config)# exit
58 1 Matthieu Herrb
nexus#
59 1 Matthieu Herrb
</pre>
60 1 Matthieu Herrb
61 1 Matthieu Herrb
pour un vlan non taggé
62 1 Matthieu Herrb
<pre>
63 1 Matthieu Herrb
nexus(config-if)# switchport access vlan 3131
64 1 Matthieu Herrb
</pre>
65 1 Matthieu Herrb
66 2 Matthieu Herrb
h3. Etat des interfaces
67 3 Matthieu Herrb
68 1 Matthieu Herrb
<pre>
69 1 Matthieu Herrb
nexus# sh int status
70 1 Matthieu Herrb
nexus# sh int transceiver
71 1 Matthieu Herrb
nexus# sh int ethernet 1/1
72 16 Sebastien Badia
# Afficher le DOM d'une optique
73 16 Sebastien Badia
nexus# sh int Eth 1/1 tran de
74 1 Matthieu Herrb
</pre>
75 1 Matthieu Herrb
</pre>
76 2 Matthieu Herrb
77 1 Matthieu Herrb
h3. Boot
78 1 Matthieu Herrb
79 1 Matthieu Herrb
<pre>
80 1 Matthieu Herrb
nexus# conf t
81 1 Matthieu Herrb
nexus(config)# boot nxos bootflash:/nxos.7.0.3.I4.7.bin 
82 1 Matthieu Herrb
nexus(config)# boot order bootflash
83 1 Matthieu Herrb
nexus(config)# exit
84 1 Matthieu Herrb
nexus#
85 4 Matthieu Herrb
</pre>
86 4 Matthieu Herrb
87 15 Sebastien Badia
h3. Features et Misc
88 8 Laurent GUERBY
89 1 Matthieu Herrb
<pre>
90 15 Sebastien Badia
# Pour dire au switch d'accepter n'importe quel type de SFP
91 1 Matthieu Herrb
service unsupported-transceiver
92 15 Sebastien Badia
# Autoriser le switch à avoir une IP sur une interface VLAN
93 15 Sebastien Badia
feature interface-vlan
94 15 Sebastien Badia
# Activer les features LACP
95 15 Sebastien Badia
feature lacp
96 15 Sebastien Badia
# Activer la possiblité de faire du LLDP
97 15 Sebastien Badia
feature lldp
98 15 Sebastien Badia
# Mettre tous les ports en shutdown par défaut (penser à activer le port lors de la configuration avec un 'no shutdown'
99 15 Sebastien Badia
system default switchport shutdown
100 15 Sebastien Badia
</pre>
101 15 Sebastien Badia
102 15 Sebastien Badia
h3. Misc
103 15 Sebastien Badia
104 15 Sebastien Badia
<pre>
105 8 Laurent GUERBY
no password strength-check
106 8 Laurent GUERBY
107 13 Laurent GUERBY
nexus# sh mac address-table 
108 13 Laurent GUERBY
109 13 Laurent GUERBY
nexus# sh environment
110 13 Laurent GUERBY
(...) 
111 13 Laurent GUERBY
Temperature:
112 13 Laurent GUERBY
-------------------------------------------------------------------------
113 13 Laurent GUERBY
Module  Sensor             MajorThresh   MinorThres   CurTemp     Status 
114 13 Laurent GUERBY
                           (Celsius)     (Celsius)   (Celsius)           
115 13 Laurent GUERBY
-------------------------------------------------------------------------
116 13 Laurent GUERBY
1        Back-Right (D0)   70            44            33         Ok             
117 13 Laurent GUERBY
1        Back-Left  (D1)   70            42            29         Ok             
118 13 Laurent GUERBY
1        Front-Right(D2)   70            47            32         Ok             
119 13 Laurent GUERBY
1        Front-Left (D3)   70            49            30         Ok         
120 13 Laurent GUERBY
121 14 Laurent GUERBY
nexus# sh int e1/1 cap
122 14 Laurent GUERBY
nexus# sh int e1/1 tra det
123 14 Laurent GUERBY
124 1 Matthieu Herrb
125 1 Matthieu Herrb
# TODO verifier
126 1 Matthieu Herrb
conf t
127 1 Matthieu Herrb
int eth1/4
128 1 Matthieu Herrb
switchport trunk allowed vlan xxx
129 1 Matthieu Herrb
switchport trunk native vlan nnn
130 1 Matthieu Herrb
</pre>
131 19 Laurent GUERBY
132 22 Laurent GUERBY
h3. NTP
133 22 Laurent GUERBY
134 22 Laurent GUERBY
Client de nagios :
135 22 Laurent GUERBY
136 22 Laurent GUERBY
<pre>
137 22 Laurent GUERBY
conf t
138 22 Laurent GUERBY
ntp server 192.168.3.7
139 22 Laurent GUERBY
ntp source-interface  Vlan3175
140 22 Laurent GUERBY
</pre>
141 22 Laurent GUERBY
142 19 Laurent GUERBY
h3. 40G
143 19 Laurent GUERBY
144 19 Laurent GUERBY
40G <=> 4x10G reboot necessaire
145 19 Laurent GUERBY
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3000/sw/interfaces/6_x/b_Cisco_n3k_Interfaces_Configuration_Guide_602_U11/b_Cisco_n3k_Interfaces_Configuration_Guide_602_U11_chapter_010.html
146 19 Laurent GUERBY
147 19 Laurent GUERBY
<pre>
148 19 Laurent GUERBY
conf t
149 19 Laurent GUERBY
hardware profile portmode 48x10g+4x40g
150 19 Laurent GUERBY
exit
151 19 Laurent GUERBY
reload
152 19 Laurent GUERBY
</pre>
153 19 Laurent GUERBY
154 19 Laurent GUERBY
4x10G :
155 19 Laurent GUERBY
156 19 Laurent GUERBY
<pre>
157 19 Laurent GUERBY
hardware profile portmode 64x10G
158 19 Laurent GUERBY
</pre>
159 19 Laurent GUERBY
160 24 Laurent GUERBY
h3. MPLS
161 8 Laurent GUERBY
162 24 Laurent GUERBY
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3000/sw/label_switching/7x/b_Cisco_Nexus_3000_Series_NX-OS_Label_Switching_Configuration_Guide_7x/b_Cisco_Nexus_3000_Series_NX-OS_Label_Switching_Configuration_Guide_7x_chapter_010.html
163 24 Laurent GUERBY
<pre>
164 24 Laurent GUERBY
n3064a# show feature-set 
165 24 Laurent GUERBY
Feature Set Name      ID        State   
166 24 Laurent GUERBY
--------------------  --------  --------
167 24 Laurent GUERBY
fex                    3          uninstalled
168 24 Laurent GUERBY
mpls                   4          uninstalled
169 24 Laurent GUERBY
fabric                 7          uninstalled
170 24 Laurent GUERBY
fcoe-npv               8          uninstalled
171 24 Laurent GUERBY
</pre>
172 24 Laurent GUERBY
173 24 Laurent GUERBY
Linux
174 24 Laurent GUERBY
<pre>
175 24 Laurent GUERBY
20180312 09:09:57<guerby> test du lundi matin sur kernel 4.16-rc4 avec iproute2 4.15.0:  ip route add 10.1.1.0/30 encap mpls 200/300 dev eth0 et tcpdump donne
176 24 Laurent GUERBY
20180312 09:09:59<guerby> 09:07:56.394863 70:85:c2:3a:17:2a > ff:ff:ff:ff:ff:ff, ethertype MPLS unicast (0x8847), length 106: MPLS (label 200, exp 0, ttl 64) (label 300, exp 0, [S], ttl 64) 91.224.148.12 > 10.1.1.1: ICMP echo request, id 25171, seq 37, length 64
177 24 Laurent GUERBY
</pre>
178 24 Laurent GUERBY
179 4 Matthieu Herrb
h2. Infos
180 4 Matthieu Herrb
181 4 Matthieu Herrb
<pre>
182 4 Matthieu Herrb
nexus# sh version
183 4 Matthieu Herrb
Cisco Nexus Operating System (NX-OS) Software
184 4 Matthieu Herrb
TAC support: http://www.cisco.com/tac
185 4 Matthieu Herrb
Copyright (C) 2002-2017, Cisco and/or its affiliates.
186 4 Matthieu Herrb
All rights reserved.
187 4 Matthieu Herrb
The copyrights to certain works contained in this software are
188 4 Matthieu Herrb
owned by other third parties and used and distributed under their own
189 4 Matthieu Herrb
licenses, such as open source.  This software is provided "as is," and unless
190 4 Matthieu Herrb
otherwise stated, there is no warranty, express or implied, including but not
191 4 Matthieu Herrb
limited to warranties of merchantability and fitness for a particular purpose.
192 4 Matthieu Herrb
Certain components of this software are licensed under
193 4 Matthieu Herrb
the GNU General Public License (GPL) version 2.0 or 
194 4 Matthieu Herrb
GNU General Public License (GPL) version 3.0  or the GNU
195 4 Matthieu Herrb
Lesser General Public License (LGPL) Version 2.1 or 
196 4 Matthieu Herrb
Lesser General Public License (LGPL) Version 2.0. 
197 4 Matthieu Herrb
A copy of each such license is available at
198 4 Matthieu Herrb
http://www.opensource.org/licenses/gpl-2.0.php and
199 4 Matthieu Herrb
http://opensource.org/licenses/gpl-3.0.html and
200 4 Matthieu Herrb
http://www.opensource.org/licenses/lgpl-2.1.php and
201 4 Matthieu Herrb
http://www.gnu.org/licenses/old-licenses/library.txt.
202 4 Matthieu Herrb
203 4 Matthieu Herrb
Software
204 4 Matthieu Herrb
  BIOS: version 4.0.0
205 4 Matthieu Herrb
  NXOS: version 7.0(3)I4(7)
206 4 Matthieu Herrb
  BIOS compile time:  12/05/2016
207 4 Matthieu Herrb
  NXOS image file is: bootflash:///nxos.7.0.3.I4.7.bin
208 4 Matthieu Herrb
  NXOS compile time:  6/28/2017 14:00:00 [06/28/2017 21:53:29]
209 4 Matthieu Herrb
210 4 Matthieu Herrb
211 4 Matthieu Herrb
Hardware
212 4 Matthieu Herrb
  cisco Nexus3000 C3064PQ Chassis 
213 4 Matthieu Herrb
  Intel(R) Celeron(R) CPU        P4505  @ 1.87GHz with 3903284 kB of memory.
214 4 Matthieu Herrb
  Processor Board ID FOC17342TSZ
215 4 Matthieu Herrb
216 4 Matthieu Herrb
  Device name: nexus
217 4 Matthieu Herrb
  bootflash:    1638000 kB
218 4 Matthieu Herrb
  usb1:               0 kB (expansion flash)
219 4 Matthieu Herrb
220 4 Matthieu Herrb
Kernel uptime is 0 day(s), 2 hour(s), 10 minute(s), 12 second(s)
221 4 Matthieu Herrb
222 4 Matthieu Herrb
Last reset at 335975 usecs after  Wed Feb 14 15:25:27 2018
223 4 Matthieu Herrb
224 4 Matthieu Herrb
  Reason: Reset Requested by CLI command reload
225 4 Matthieu Herrb
  System version: 7.0(3)I4(7)
226 4 Matthieu Herrb
  Service: 
227 4 Matthieu Herrb
228 4 Matthieu Herrb
plugin
229 4 Matthieu Herrb
  Core Plugin, Ethernet Plugin
230 4 Matthieu Herrb
231 4 Matthieu Herrb
Active Package(s):
232 5 Matthieu Herrb
233 12 Laurent GUERBY
nexus# sh inventory all
234 5 Matthieu Herrb
NAME: "Chassis",  DESCR: "Nexus3000 C3064PQ Chassis"             
235 5 Matthieu Herrb
PID: N3K-C3064PQ-10GX    ,  VID: V01 ,  SN: FOC1734R15F          
236 5 Matthieu Herrb
237 5 Matthieu Herrb
NAME: "Slot 1",  DESCR: "48x10GE + 4x40G Supervisor"            
238 5 Matthieu Herrb
PID: N3K-C3064PQ-10GX    ,  VID: V01 ,  SN: FOC17342TSZ          
239 5 Matthieu Herrb
240 5 Matthieu Herrb
NAME: "Power Supply 1",  DESCR: "Nexus3000 C3064PQ Chassis Power Supply"
241 5 Matthieu Herrb
PID: N2200-PAC-400W      ,  VID: V04 ,  SN: DTN1733P0VH          
242 5 Matthieu Herrb
243 5 Matthieu Herrb
NAME: "Power Supply 2",  DESCR: "Nexus3000 C3064PQ Chassis Power Supply"
244 5 Matthieu Herrb
PID: N2200-PAC-400W      ,  VID: V04 ,  SN: DTN1733P0UK          
245 5 Matthieu Herrb
246 5 Matthieu Herrb
NAME: "Fan 1",  DESCR: "Nexus3000 C3064PQ Chassis Fan Module"  
247 1 Matthieu Herrb
PID: N3K-C3064-FAN-F     ,  VID: V00 ,  SN: N/A                  
248 12 Laurent GUERBY
249 12 Laurent GUERBY
NAME: Ethernet1/1,  DESCR: FiberStore                              
250 12 Laurent GUERBY
PID: SFP-H10GB-ACU10M    ,  VID: SFP-10G-AOC     ,  SN: F176CO35764-1    
251 23 Laurent GUERBY
252 23 Laurent GUERBY
nexus# sh license 
253 23 Laurent GUERBY
license_FOC1734R15F_12_1.lic:
254 23 Laurent GUERBY
SERVER this_host ANY
255 23 Laurent GUERBY
VENDOR cisco
256 23 Laurent GUERBY
FEATURE LAN_BASE_SERVICES_PKG cisco 1.0 permanent uncounted \
257 23 Laurent GUERBY
        VENDOR_STRING=<LIC_SOURCE>NEXUS_PRODUCTION</LIC_SOURCE><SKU>N3K-BAS1K9</SKU> \
258 23 Laurent GUERBY
        HOSTID=VDH=FOC1734R15F \
259 23 Laurent GUERBY
        NOTICE=<LicFileID>20131030222602000</LicFileID><LicLineID>1</LicLineID><PAK>N3K-C3064PQ-10GXFOC1734R15F</PAK> \
260 23 Laurent GUERBY
        SIGN=BBF8EBE2F7B6
261 23 Laurent GUERBY
FEATURE LAN_ENTERPRISE_SERVICES_PKG cisco 1.0 permanent uncounted \
262 23 Laurent GUERBY
        VENDOR_STRING=<LIC_SOURCE>NEXUS_PRODUCTION</LIC_SOURCE><SKU>N3K-LAN1K9</SKU> \
263 23 Laurent GUERBY
        HOSTID=VDH=FOC1734R15F \
264 23 Laurent GUERBY
        NOTICE=<LicFileID>20131030222602000</LicFileID><LicLineID>2</LicLineID><PAK>N3K-C3064PQ-10GXFOC1734R15F</PAK> \
265 23 Laurent GUERBY
        SIGN=FF75EB18A86E
266 23 Laurent GUERBY
267 23 Laurent GUERBY
</pre>
268 23 Laurent GUERBY
269 23 Laurent GUERBY
270 7 Laurent GUERBY
h2. Consommation
271 6 Laurent GUERBY
272 6 Laurent GUERBY
77 Watt, cos phi 0.92, pas de pic pendant le boot