EEM with Nexus 5020?

Similar Questions

• AAA with Nexus problem

  Hi there

  I try to get the config directly on our nexus switches to use our local ACS server for authorization and authentication command. I want of course to yuse to a local user-database if the connection to the central server of ACS fails. But I can't properly syntax--some please see what I'm doing wrong here--is here - I set it on my nexus 5020:

  I have defined a Ganymede group + named TACSRV

  AAA server Ganymede group + TACSRV

  Group AAA authentication login TACSRV default

  AAA authentication local console connection

  Group AAA authorization commands by default TACSRV

  AAA authentication login error-enable

  how it should look to first ask in TACSRV and if not properly the local database servers?

  best regards /ti

  Hello

  You need to add at the end of each authentication and authorization, set the "local".

  Like this:

  Group AAA authentication login default local TACSRV
  AAA config-commands to default local group TACSRV permissions
  AAA authorization commands by default local group TACSRV

  Dan

• iSCSI MPIO (Multipath) with Nexus 1000v

  Anyone out there have iSCSI MPIO successfully with Nexus 1000v? I followed the Cisco's Guide to the best of my knowledge and I tried a number of other configurations without success - vSphere always displays the same number of paths as it shows the targets.

  The Cisco document reads as follows:

  Before you begin the procedures in this section, you must know or follow these steps.

  •You have already configured the host with the channel with a port that includes two or more physical network cards.

  •You have already created the VMware kernel NIC to access the external SAN storage.

  •A Vmware Kernel NIC can be pinned or assigned to a physical network card.

  •A physical NETWORK card may have several cards pinned VMware core network or assigned.

  That means 'a core of Vmware NIC can be pinned or assigned to a physical NIC' average regarding the Nexus 1000v? I know how to pin a physical NIC with vDS standard, but how does it work with 1000v? The only thing associated with "pin" I could find inside 1000v was with port channel subgroups. I tried to create a channel of port with manuals subgroups, assigning values of sub-sub-group-id for each uplink, then assign an id pinned to my two VMkernel port profiles (and directly to ports vEthernet as well). But that doesn't seem to work for me

  I can ping both the iSCSI ports VMkernel from the switch upstream and inside the VSM, so I know Layer 3 connectivity is here. A strange thing, however, is that I see only one of the two addresses MAC VMkernel related on the switch upstream. Both addresses show depending on the inside of the VSM.

  What I'm missing here?

  Just to close the loop in case someone stumbles across this thread.

  In fact, it is a bug on the Cisco Nexus 1000v. The bug is only relevant to the ESX host that have been fixed in 4.0u2 (and now 4.1). Around short term work is again rev to 4.0u1. Medium-term correction will be integrated into a maintenance for the Nexus 1000V version.

  Our implementation of code to get the multipath iSCSI news was bad but allowed in 4.0U1. 4.0U2 no longer our poor implementation.

  For iSCSI multipath and N1KV remain 4.0U1 until we have a version of maintenance for the Nexus 1000V

• Script to run Python with EEM on Nexus 9K

  Hello!

  I am trying to run the example provided in the following link for "Running Scripts with Embedded Event Manager":

  http://www.Cisco.com/c/en/us/TD/docs/switches/Datacenter/nexus9000/SW/6-...

  Here is my configuration of the Nexus 9 K switch EEM:

  NX9K-autonomous-Pod-1 # sh run EEM

  ! Command: show running-config EEM
  ! Time: Sat Nov 15 09:54:52 2014

  version 6.1 (2) I3 (1)
  Event Manager applet a1
  cli event corresponds to "display the clock.
  Action 1 cli python bootflash:pydate.py
  2 default event action
  Action 3 syslog msg I like EEM

  And here is an example of work of pydate.py that I grabbed from GitHub:

  GitHub Repo: https://github.com/haya14busa/pydate/blob/master/pydate.py

  NX9K-autonomous-Pod-1 # python bootflash:pydate.py
  DATETIME = 2014-11-15 09:47:03
  TIMESTAMP = 1416044823
  DateTime: 2014-11-15 09:47:03-> TimeStamp: 1416044823
  TimeStamp: 1416044823-> DateTime: 2014-11-15 09:47:03
  NX9K-autonomous-Pod-1 #.

  Finally, here is what happens when I run the command 'See the clock' in an attempt to trigger the EEM applet:

  NX9K-autonomous-Pod-1 # sh clock
  09:54:58.746 UTC Saturday, November 15, 2014
  NX9K-autonomous-Pod-1 # 2014 Nov 15 09:54:58 NX9K-autonomous-Pod-1% VSHD-5-VSHD_SYSLOG_CONFIG_I: configured for the vty by admin on vsh.8883
  2014-15 Nov 09:54:58 NX9K-autonomous-Pod-1% VSHD-5-VSHD_SYSLOG_CONFIG_I: configured for the vty by admin on vsh.8894

  Any help is appreciated!

  The syslog message must come before the 'event' by default.  As for what the Python script prints, it won't happen when she is called to the EEM.  But you may like the Cisco.com article says, look at the log to make sure that the script ran.

• Compatible Nexus 5020 5.0.2.N2.1 with Tac_plus?

  Friends,

  I have a problem with the Nexus switches, is impossible authenticate from tac_plus. In another company, I have configured ACS to authenticate the switches of Nexus and OK

  The configuration of my tac_plus is:

  user = {gian

  Login = cleartext prueba

  Member = nexus

  Group = {nexus

  by default the service allowed =

  Service = {shell

  #double - quote - values = yes

  #shell: roles = "------"network-admin\»"

  Cisco-av-pair * shell: roles = "network-admin".

  The configuration of the switch is:

  RADIUS-server host xx.xx.xx.xx touch 7 'xxxxx '.
  AAA server Ganymede group + AAA_TACACS_SERVER
  Server xx.xx.xx.xx
  source-mgmt0 interface

  Group AAA authentication login AAA_TACACS_SERVER default
  AAA authorization commands by default local group AAA_TACACS_SERVER
  Default accounting AAA group AAA_TACACS_SERVER

  Any idea?.

  Thank you

  Hello

  You use roles you don't need the permission of config command. If please remove this line and try again.

• Problem with Nexus 7 connection with the computer.

  I have a Nexus 7 (2013) and I am unable to connect wireless to my PC Windows 7 Home Premium.  I can connect via a USB cable, but I really need to have a wifi connection.

  The PC does not recognize the wireless device, "add a device"produced nothing."  I would appreciate help!

  Thanks for coming back.

  Inspiron years 620 doesn't have the built-in Bluetooth function. You need to buy a Bluetooth adapter compatible with Windows 8 in a local computer store and plug it into the computer manufacturer.

  It will be useful.

• Balancing of VMware with Nexus 1000v

  With the vmware puts vDS or vSS, I see many designs use the asset-liability approach for binding rising consolidation of NETWORK cards, IE a vmnic is active will fabric and a vmnic is passive will fabric B. This setting is configured in vSphere.

  Se this article: http://bradhedlund.com/2010/09/15/vmware-10ge-qos-designs-cisco-ucs-nexus/

  Is this correct, that we can put in place a regime with the 1000V? All the network is on the 1000V config, and as far as I know, we can only configure the uplink in these 3 modes:

  1. LACP 2. vPC-Host Mode 3. vPC-Host Mode Mac pinning

  and they are all 'active' based.

  Post edited by: Atle Dale

  Yes.  All uplinks are used.  Each VM virtual interface is pinned to one of of the uplinks.  If one uplink goes down, all interfaces pinned gets dynamically likes to remaining uplinks.  A mac address will only see on a single interface at a time.  This is how MAC pinning prevents STP loops.

  Robert

• UCS environment vSphere 5.1 upgrade to vSphere 6 with Nexus 1000v

  Hi, I've faced trying to get the help of TAC and internet research on the way to upgrade to our UCS environment, and as a last thought resort, I would try a post on the forum.

  My environment is an environment of UCS chassis with double tracking, tissue of interconnections, years 1110 with pair HA of 1000v 5.1 running vsphere.  We have updated all our equipment (blades, series C and UCS Manager) for the supported versions of the firmware by CISCO for vSphere 6.

  We have even upgraded our Nexus 1000v 5.2 (1) SV3(1.5a) which is a support for vSphere version 6.

  To save us some treatment and cost of issuing permits and on our previous vcenter server performance was lacking and unreliable, I looked at the virtual migration on the vCenter 6 appliance.  There is nowhere where I can find information which advises on how to begin the process of upgrading VMWare on NGC when the 1000v is incorporated.  I would have thought that it is a virtual machine if you have all of your improved versions to support versions for 6 veil smooth.

  A response I got from TAC was that we had to move all of our VM on a standard switch to improve the vCenter, but given we are already on a supported the 1000v for vSphere version 6 that he left me confused, nor that I would get the opportunity to rework our environment being a hospital with this kind of downtime and outage windows for more than 200 machines.

  Can provide some tips, or anyone else has tried a similar upgrade path?

  Greetings.

  It seems that you have already upgraded your components N1k (are VEM upgraded to match?).

  Are your questions more info on how you upgrade/migration to a vcenter server to another?

  If you import your vcenter database to your new vcenter, it shouldn't have a lot of waste of time, as the VSM/VEM will always see the vcenter and N1k dVS.  If you change the vcenter server name/IP, but import the old vcenter DB, there are a few steps, you will need to ensure that the connection of VSM SVS corresponds to the new IP address in vcenter.

  If you try to create a new additional vcenter in parallel, then you will have problems of downtime as the name of port-profiles/network programming the guestVMs currently have will lose their 'support' info if you attempt to migrate, because you to NIC dVS standard or generic before the hosts for the new vcenter.

  If you are already on vcenter 6, I believe you can vmotion from one host to another and more profile vswitch/dVS/port used.

  Really need more detail on how to migrate from a vcenter for the VCA 6.0.

  Thank you

  Kirk...

• Nexus 5000 operating as a standalone FibreChannel Switch

  Hello world

  Does anyone know if the Nexus 5000 can be used as a standalone FibreChannel Switch? Which means I don't want to run NPV on this and connect it up to a MDS or a different type of switch FibreChannel. I'm looking to create a 'Pod' scenario. Where a few servers and a storage Bay would hang the 5K on a login F_Ports is local FLOGI DB and be able to use zoning and traffic went immediately from the 5K, etc etc? I know that 5 K is not a full blown fibre channel switch such that it has some limitations, but again I think to a "Pod" as scenario.

  If the script above won't work for some reason any using CF can achieve us with FCoE CNAs on servers & storage Bay?

  Finally, FC domain IDS how 5 K can cause?

  Sorry for the questions. I'm new to SAN switching at this stage.

  Thank you all!

  Yes, it works even FC code NX - OS like a switch MDS switch.

  You connect FC HBAS, ports SAN or FCoE CNAs to Nexus.

  However, you need to license storage.

  Nexus 5010 supports up to 8 4 G FC or FC G 6 8 ports with the expansion module

  Nexus 5020 supports up to 16 4 G FC or 12 8 G FC ports with the expansion module

  Nexus 5548UP supports up to ports FC 32 4 / 8G without the expansion module

  Nexus 5548UP supports up to 48 4 FC ports / 8G with the expansion module

  Nexus 5596UP supports up to 48 4 FC ports / 8G without the expansion module

  Nexus 5596UP supports up to 96 4 FC ports / 8G with the expansion module

• Strange problem with BT Headset!

  Hello

  I have a very strange problem with BT headset.  My Z3 is model of official unlocked Docomo of SO - 01 G.  I got PlayStation Voxtube 500 BT headset BT version is THE 4.0.  This headset has been used with Nexus 5 (Android 5.1.1) without any problem and the battery last almost a week to stanby with a few minute talk time per day.  However, after not getting Z3 with Android 4.4.4, pairing with Voxtube has no problem.  Then, the battery is discharged within 4-5 hours stanby.  I tested it for 3 or 4 times, it has come down to that there must be something worng with the battery of the headset.

  So, I got with PlayStation representative claim (it is only a few months old).  Surprisingly, representative of PlayStation has all the test suggested no stanby time problem with their phones iPhone 5 or Sumsung Galaxy S5.  Then I took back recharged so its performance is very short wait duration the same as before.  So, I tested it with my iPad Mini 3 and performance return to normal standby time.

  So, it can be concluded for only problem is with the Z3. But once again with the mating with the other headset BT Jabra Tag2, stanby time is within the normal range (4-5 days).  When that happens?  I am very confused. Should I give up on PlayStation?

  Thank you for your time,

  Simply upgrade to 5.0.2 lolipop and hope this will help me on this issue.

• Support of EEM in cbs31x0-universal - mz.122 - 52.SE on 3110 x

  Hello

  According to the Cisco 3110 x documents, this IOS platform supports EEM scripting, and in the global configuration, there is no related commands. ("handler" and so on).

  Not really this image support "See" scripting?

  Because for some work around, I have to write a script.

  Thanks in advance

  You will need 12.2 (40) SE or higher for EEM.  In order to obtain EEM with IPBASE (it's perhaps the license you have loaded), you'll need 12.2 (55) SE or higher.  You can get EEM with 12.2 (52), but you will need to upgrade to licensed IPSERVICES.  Need you a valid SmartNet contract to download the new code.

• The Nexus 1000V loop prevention

  Hello

  I wonder if there is a mechanism that I can use to secure a network against the loop of L2 packed the side of vserver in Vmware with Nexus 1000V environment.

  I know, Nexus 1000V can prevent against the loop on the external links, but there is no information, there are features that can prevent against the loop caused by the bridge set up on the side of the OS on VMware virtual server.

  Thank you in advance for an answer.

  Concerning

  Lukas

  Hi Lukas.

  To avoid loops, the N1KV does not pass traffic between physical network cards and also, he silently down traffic between vNIC is the bridge by operating system.

  http://www.Cisco.com/en/us/prod/collateral/switches/ps9441/ps9902/guide_c07-556626.html#wp9000156

  We must not explicit configuration on N1KV.

  Padma

• Cisco Nexus to use authentication Radius AAA using Microsoft 2008 NPS

  I have a Nexus 7010 running

  I was wondering if you can help me with something. I'm having a problem with the approval of the order through our aaa config. We have not an authentication problem of command approval that does not work. From what I've seen and read Nexus NX - OS 6.x has not all orders for the aaa authorization, unless you configure GANYMEDE +. My basic config is below if you can help would be much appreciated.

  > ip source interface mgmt radius 0

  > key RADIUS-server XXXXX

  > host X.X.X.X key radius server authentication XXXXX accountant

  > RADIUS-server host X.X.X.X XXXXX key authentication accountant aaa

  > authentication login default group aaa authentication Radius_Group

  > RADIUS server logon group console local aaa Radius_Group

  > server X.X.X.X

  > server X.X.X.X

  > mgmt0 interface-source

  Also nobody how to configure Microsoft 2008 NPS as Raduis server to work with Nexus? I read a few post that suggests to change the

  Shell: roles = "vdc-admin" in the value field of the attribute in the RADIUS server

  Anyone know if it works?

  Thank you

  I haven't used NPS before but sounds like you are on the right track. As Ed mentioned in his post, GBA, you can set the type of protocols that you will accept during an authentication session. Authentication Nexus sessions is considered as PAP/ASCII, so you should be good to go. I don't have a Nexus switch to test with, but if you can use wireshark to capture the session and see the exact protocol / method used. However, I am sure that PAP is the way to go:

  http://www.Cisco.com/c/en/us/TD/docs/switches/Datacenter/SW/4_1/NX-OS/se...

  I also found the link that you might find useful:

  http://www.802101.com/2013/08/Cisco-Nexus-and-AAA-authentication.html

  Thank you for evaluating useful messages!

• Design/implementation of Nexus 1000V

  Hi team,

  I have a premium partner who is an ATP on Data Center Unified Computing. He has posted this question, I hope you can help me to provide the resolution.

  I have questions about nexus 1KV design/implementation:

  -How to migrate virtual switches often to vswitch0 (in each ESX server has 3 vswitches and the VMS installation wizard will only migrate vswicht0)? for example, to other vswitchs with other vlan... Please tell me how...
  -With MUV (vmware update manager) can install modules of MEC in ESX servers? or install VEM manually on each ESX Server?
  -Assuming VUM install all modules of MEC, MEC (vib package) version is automatically compatible with the version of vmware are?
  -is the need to create port of PACKET-CONTROL groups in all THE esx servers before migrating to Nexus 1000? or only the VEM installation is enough?
  -According to the manual Cisco VSM can participate in VMOTION, but, how?... What is the recommendation? When the primary virtual machines are moving, the secondary VSM take control? This is the case with connectivity to all virtual machines?
  -When there are two clusters in a vmware vcenter, how to install/configure VSM?
  -For the concepts of high availability, which is the best choice of design of nexus? in view of the characteristics of vmware (FT, DRS, VMOTION, Cluster)
  -How to migrate port group existing Kernel to nexus iSCSI?... What are the steps? cisco manual "Migration from VMware to Cisco Nexus 1000V vSwitch" show how to generate the port profile, but
  How to create iSCSI target? (ip address, the username/password)... where it is defined?
  -Assuming that VEM licenses is not enough for all the ESX servers, ¿will happen to connectivity of your virtual machines on hosts without licenses VEM? can work with vmware vswitches?

  I have to install nexus 1000V in vmware with VDI plataform, with multiple ESX servers, with 3 vswitch on each ESX Server, with several machinne virtual running, two groups defined with active vmotion and DRS and the iSCSI storage Center

  I have several manuals Cisco on nexus, but I see special attention in our facilities, migration options is not a broad question, you you have 'success stories' or customers experiences of implementation with migration with nexus?

  Thank you in advance.

  Jojo Santos

  Cisco partner Helpline presales

  Thanks for the questions of Jojo, but this question of type 1000v is better for the Nexus 1000v forum:

  https://www.myciscocommunity.com/Community/products/nexus1000v

  Answers online.  I suggest you just go in a Guides began to acquire a solid understanding of database concepts & operations prior to deployment.

  jojsanto wrote:
  Hi Team,
  I have a premium partner who is an ATP on Data Center Unified Computing. He posted this question, hopefully you can help me provide resolution.
  I have questions about nexus 1KV design/implementation:
  -How migrate virtual switchs distint to vswitch0 (in each ESX server has 3 vswitches and the installation wizard of VMS only migrate vswicht0)?? for example others vswitchs with others vlan.. please tell me how...
  [Robert] After your initial installation you can easily migrate all VMs within the same vSwitch Port Group at the same time using the Network Migration Wizard.  Simply go to Home - Inventory - Networking, right click on the 1000v DVS and select "Migrate Virtual Machine Networking..."   Follow the wizard to select your Source (vSwitch Port Groups) & Destination DVS Port Profiles
  -With VUM (vmware update manager) is possible install VEM modules in ESX Servers ??? or must install VEM manually in each ESX Server?
  [Robert] As per the Getting Started & Installation guides, you can use either VUM or manual installation method for VEM software install.
  http://www.cisco.com/en/US/docs/switches/datacenter/nexus1000/sw/4_0_4_s_v_1_3/getting_started/configuration/guide/n1000v_gsg.html
  -Supposing of VUM install all VEM modules, the VEM version (vib package) is automatically compatible with build existen vmware version?
  [Robert] Yes.  Assuming VMware has added all the latest VEM software to their online repository, VUM will be able to pull down & install the correct one automatically.
  
  
  -is need to create PACKET-MANAGEMENT-CONTROL port groups in ALL esx servers before to migrate to Nexus 1000? or only VEM installation is enough???
  [Robert] If you're planning on keeping the 1000v VSM on vSwitches (rather than migrating itself to the 1000v) then you'll need the Control/Mgmt/Packet port groups on each host you ever plan on running/hosting the VSM on.  If you create the VSM port group on the 1000v DVS, then they will automatically exist on all hosts that are part of the DVS.
  -According to the Cisco manuals VSM can participate in VMOTION, but, how? .. what is the recommendation?..when the primary VMS is moving, the secondary VSM take control?? that occurs with connectivity in all virtual machines?
  [Robert] Since a VMotion does not really impact connectivity for a significant amount of time, the VSM can be easily VMotioned around even if its a single Standalone deployment.  Just like you can vMotion vCenter (which manages the actual task) you can also Vmotion a standalone or redundant VSM without problems.  No special considerations here other than usual VMotion pre-reqs.
  -When there two clusters in one vmware vcenter, how must install/configure VSM?
  [Robert] No different.  The only consideration that changes "how" you install a VSM is a vCenter with multiple DanaCenters. VEM hosts can only connect to a VSM that reside within the same DC.  Different clusters are not a problem.
  -For High Availability concepts, wich is the best choices of design of nexus? considering vmware features (FT,DRS, VMOTION, Cluster)
  [Robert] There are multiple "Best Practice" designs which discuss this in great detail.  I've attached a draft doc one on this thread. A public one will be available in the coming month. Some points to consider is that you do not need FT.  FT is still maturing, and since you can deploy redundany VSMs at no additional cost, there's no need for it.  For DRS you'll want to create a DRS Rule to avoid ever hosting the Primar & Secondary VSM on the same host.
  -How to migrate existent Kernel iSCSI port group to nexus? .. what are the steps? in cisco manual"Migration from VMware vSwitch to Cisco Nexus 1000V" show how to generate the port-profile, but
  
      how to create the iSCSI target? (ip address, user/password) ..where is it defined?
  [Robert] You can migrate any VMKernel port from vCenter by selecting a host, go to the Networking Configuration - DVS and select Manage Virtual Adapters - Migrate Existing Virtual Adapter. Then follow the wizard.  Before you do so, create the corresponding vEth Port Profile on your 1000v, assign appropriate VLAN etc.  All VMKernel IPs are set within vCenter, 1000v is Layer 2 only, we don't assign Layer 3 addresses to virtual ports (other than Mgmt).  All the rest of the iSCSI configuration is done via vCenter - Storage Adapters as usual (for Targets, CHAP Authentication etc)
  -Supposing of the licences of VEM is not enough for all ESX servers,, ¿will happen to the connectivity of your virtual machines in hosts without VEM licences? ¿can operate with vmware vswitches?
  [Robert] When a VEM comes online with the DVS, if there are not enough available licensses to license EVERY socket, the VEM will show as unlicensed.  Without a license, the virtual ports will not come up.  You should closely watch your licenses using the "show license usage" and "show license usage " for detailed allocation information.  At any time a VEM can still utilize a vSwitch - with or without 1000v licenses, assuming you still have adapters attached to the vSwitches as uplinks.
  I must install nexus 1000V in vmware plataform with VDI, with severals Servers ESX, with 3 vswitch on each ESX Server, with severals virtual machinne running, two clusters defined with vmotion and DRS active and central storage with iSCSI
  I have severals cisco manuals about nexus, but i see special focus in installations topics, the options for migrations is not extensive item, ¿do you have "success stories" or customers experiences of implementation with migrations with nexus?
  [Robert] Have a good look around the Nexus 1000v community Forum.   Lots of stories and information you may find helpful.
  Good luck!
  

• N1k with MS NLB in hyper-v

  We have a nexus 1000v and hyper-v .we try to do a load balancing between two computers virtual hyper-v to work with nexus port-profile

  I used the config of the blow for port-profile

  profile port vethernet MS_Load_Balance type
  no static-auto-learning mac
  no downtime
  GUID 426dfa42-73ff-4f26-8af0-9918e96575a
  Max-ports 1024
  enabled state
  publish the port profile

  and the config of the two network adapters in VM vethe

  interface Vethernet177
  inherit dynpp_641ecc76-990d-4da-a445-6e311dcf182f_7879f0a4-723c-459e-a029-e2142bbe1e8e port-profile
  Description - CLG - 01, NIC
  no static-auto-learning mac
  switchport uufb disable
  dvPort «24d9e687-6979-4725-bd50-ee98ccd5367c--26f75fc2-ec69-43f0-b26b-68eb28ce19b9» uuid
  no downtime

  When I tried to charge one of the two virtual machines it loss the ping and connectivity of balancing NETWORK load and got the error

  Hi Marc,

  Try the following;

  1. connect to a virtual computer that will be part of the NLB Cluster

  2. after login, choose the veth adapter will be part of the NLB cluster and change the MTU to 9014 of network properties.

  This is due to the fact that the Protocol MS NLB will not bind to the card to less than configurd to use the legacy network adapter (network adapter vs standard).

  Also a great link to solve this solution is below if the above does not work.

  http://retrohack.com/NLB-the-interface-is-misconfigured/

  If you have any other questions please let me know.

  Kind regards

  Qiese Sa'di