VXLAN on UCS: IGMP with Catalyst 3750, 5548 Nexus, Nexus 1000V

Similar Questions

• Issue of QoS Catalyst 3750

  Hello

  I have a scan server (IP = 1.2.3.4 for this example) who wreaks havoc when it works, which is evident in the number of drops of output I see.  I thought the police thing, but it is a production environment and 3750-G switch does not support Netflow or any other tool that would provide accurate estimates of flow to work from.

  So, my thoughts are rather to implement queuing for the scan server and limit his access to common buffers, etc..  I would like to have some feedback on the config.  (I've included notes in an attempt to illustrate my thought.)

  !**| Catalyst 3750-G | **
  !
  ! * Activate QoS
  !
  MLS qos
  !
  ! * Create custom queue-set
  ! * increase buffer 1 and disable the stamp 4
  !
  MLS qos all the output queue 2 buffers 50 25 25 0
  !
  ! * To queue 1, make available to the threshold of 1 full buffer,
  ! * reserve full buffer for the local queue only, enable
  ! * queue to borrow 3 x more common pool pads.
  !
  MLS qos all the queue of output 2 1 100 100 100 400 threshold
  !
  ! * To queue 3, make available to the threshold of 1 full buffer,
  ! * reserve 30% of buffer for the local queue only, enable
  ! * queue to borrow 4 x more common pool pads.
  !
  MLS qos all the queue of output 2 3 100 100 33 165 threshold
  !
  ! * Assign values DSCP 16, 18, 20, 22 & to queue 1;
  ! * assign values DSCP 8, 10, 12, 14 & the queue of 3
  !
  queue threshold 1 dscp-map of MLS qos srr-queue output 1 16 18 20 22
  queue threshold 3 dscp-map of MLS qos srr-queue output 1 8 10 12 14
  !
  ! * To be complete, assign COS values associated with the same queues.
  !
  queue threshold cos 1-map of MLS qos srr-queue output 1 2
  queue threshold cos 3-map of MLS qos srr-queue output 1 1
  !
  ! * Access-list 130 identifies (bidirectional) scan traffic.
  !
  IP access-list 130 allow any host 1.2.3.4
  access-list 130 allow the host ip 1.2.3.4 everything
  !
  ! * Create a class map to match previously configured access group.
  !
  class-map correspondence-any CM-SCANS
  Description * no critical analysis traffic
  game group-access 130
  output
  !
  ! * Create policy-map to assign a DSCP values to analyze default traffic.
  !
  Policy-map PM-QOS-IN
  Description * Ingress QoS strategy
  class of CM-SCANS
  set ip dscp af11
  output
  !
  class class by default
  set ip dscp af21
  output
  output
  !
  ! * Assign the queue-series 2 and/or service-policy (single entry) if required.
  !
  gix/x/x interface
  queue-series 2
  entry of service-politics-PM-QOS-IN
  output
  !

  PS - There is no voice that cross this switch, so I don't see it had to book the queue 1 for voice or turn on the priority queue, etc..

  Any help is appreciated.  Thank you in advance.

  Disclaimer

  The author of this announcement offers the information in this publication without compensation and with the understanding of the reader that there is no implicit or explicit adequacy or adaptation to any purpose. Information provided is for information purposes only and should not be interpreted as making the professional advice of any kind. Use information from this announcement is only at risk of the reader.

  RESPONSIBILITY

  Any author will be responsible for any wha2tsoever of damage and interest (including, without limitation, damages for loss of use, data or profits) arising out of the use or inability to use the information in the view even if author has been advised of the possibility of such damages.

  Poster

  Well, then you're a little stuck trying to manage the flow of this server.  Unless you want to look at the penetration of the port police server and/or to "shape" the output port.  The idea being, if you can slow down the movement of this server, you might avoid configuration QoS requirements.

  Otherwise, you're on the right track, in what you're trying to do.

  You may want to traffic of tag to this server as 'trap' (CS1).  Ideally, you may be able to distinguish the traffic 'scan' of other traffic to and from this server.

  On treatment of output of your QoS policy, rather than create a 'special' configuration to handle this traffic, you should consider having a policy that has a low priority class (scavenger), which is where direct you this traffic.  That is a policy of 4 class that takes in charge in time real (PQ), foreground (twice in 10 x % of the default value), by default and the background (1%), planning priorities.

  3750 of buffer management, I found the setting of thresholds all up and moving more if not all buffers to the pool, usually works quite well.

• SG500 vs Catalyst 3750 command set

  Hello world!

  Could you give me the main differences between the set of commands SG500 and Catalyst 3750?

  Thanks in advance!

  Hello Gio, it cannot really be quantified. Not only is there a set difference command there a difference in functionality.

  The primary opposition between SB vs the catalyst switches happen is how they deal with the VLAN. On a Catalyst switch, if you do a port a trunk and do not specify a VLAN on the port, all the VLANS will be passthrough port.

  On all switches of SB, you must specify the VLAN and follow the guidelines of 802. 1 q, which means, vlan native unidentified, all the VLANS additional added to a port. In addition, a trunk port applies the filtering of capture (rejected a package where him VLAN does not fall on the port).

  In addition, the vlan, VoIP is a global configuration

  config t

  ID of the vlan 100 voices

  On a catalyst usually build you a policy then indicate this vlan voice on the port. If you specify a vlan voice on the port a SG500 it "will allow phone Yes" which is usually the opposite of the desired result.

  Another notable difference, a catalyst using the terminal command length 0 for output, the SB switches use terminal datadump

  Here's the CLI guide for the 500 series. You will actually receive a complete response, a few entries experiences user but that may be better than nothing.

  http://www.Cisco.com/en/us/docs/switches/LAN/CSBMs/Sx500/cli_guide/CLI_500.PDF

  -Tom
  Please mark replied messages useful

• Cisco Catalyst 3750 G cable StackWise Query

  Hi everyone, I hope you can shed some light on my question.

  I have a job reserved Friday to add a switch to an existing fireplace. I was wondering at what point I need to use a longer cable to complete the ring.

  The existing stack consists of 2 x Cisco Catalyst 3750 G-24TS-24 switches are the 1.5U models and I will be adding a 3750 G-12-12 to the stack. So a total of 4U.

  So I guess my question is, do you think that the CAB-STACK - 50CM = cable supplied with the unit will be long enough, or do you think I will need to order a CAB-STACK - 1 M =? It's been a while since I've done it and I think remember me being quite stiff and bulky cables. All switches are in order without a space.

  Kind regards

  Mike

  Disclaimer

  The author of this announcement offers the information in this publication without compensation and with the understanding of the reader that there is no implicit or explicit adequacy or adaptation to any purpose. Information provided is for information purposes only and should not be interpreted as making the professional advice of any kind. Use information from this announcement is only at risk of the reader.

  RESPONSIBILITY

  Any author will be responsible for any damage that it (including, without limitation, damages for loss of use, data or profits) arising out of the use or inability to use the information in the view even if author has been advised of the possibility of such damages.

  Poster

  If you do the 'classic' connections, i.e. 1 to 2, 2 to 3, 3, 4, and 4 to 1, and the 50CM won't reach between 1 and 4, you should be able to use shorter cables as: 1-2 and 1-3 and 4-2 and 4-3.

  PS:

  BTW, remember that 12-12 can use SDM models incompatible with the 3750 G.  I.e., ensure the 12-12 has a model SDM compatible before connect you to the battery.

• CBWFQ on Catalyst 3750 Switch

  Cisco switch Catalyst 3750 does support QoS CBWFQ?

  I would understand if the catalyst IOS supports control of bandwidth to a class and offer a minimum bandwidth in a situation of congestion. I have a few applications that need to increase its flow when other classes use their bandwidth. On my 3750 I don't see bandwidth control.

  Thank you very much.

  Hi you should not have to configure the qos of the mls, just use the political function of the to apply, but from what I remember there are restrictions on 3750 s I don't think you can apply the outbound policy only entrants, but he was able to change most recent IOS, I have not tested recently

  It is a good doc on 3750 s qos

  http://www.Cisco.com/c/en/us/TD/docs/switches/LAN/catalyst3750/software/...

• Switch SF300 trunk with a 3750

  Is it possible to stem a SF300 switch with a 3750 switch?  If so, how?  Whenever I turn on the 3750 trunking port I lose connection to the SF300.

  I'd appreciate any help, thank you

  Larnel

  Hi Larnel,

  You can do so by setting the 3750 for 802. 1 q ecapsulation on the trunk port, set it vlan native and wait for VLAN throughout. On the SF300, you must run the same process create the trunk port, enable the VLAN and set the PVID to match the VLAN native on the 3750 trunk interface. To do this, you will need from your VLAN pre-configured on both switches. Hope this helps you.

  Kevin

• UCS environment vSphere 5.1 upgrade to vSphere 6 with Nexus 1000v

  Hi, I've faced trying to get the help of TAC and internet research on the way to upgrade to our UCS environment, and as a last thought resort, I would try a post on the forum.

  My environment is an environment of UCS chassis with double tracking, tissue of interconnections, years 1110 with pair HA of 1000v 5.1 running vsphere.  We have updated all our equipment (blades, series C and UCS Manager) for the supported versions of the firmware by CISCO for vSphere 6.

  We have even upgraded our Nexus 1000v 5.2 (1) SV3(1.5a) which is a support for vSphere version 6.

  To save us some treatment and cost of issuing permits and on our previous vcenter server performance was lacking and unreliable, I looked at the virtual migration on the vCenter 6 appliance.  There is nowhere where I can find information which advises on how to begin the process of upgrading VMWare on NGC when the 1000v is incorporated.  I would have thought that it is a virtual machine if you have all of your improved versions to support versions for 6 veil smooth.

  A response I got from TAC was that we had to move all of our VM on a standard switch to improve the vCenter, but given we are already on a supported the 1000v for vSphere version 6 that he left me confused, nor that I would get the opportunity to rework our environment being a hospital with this kind of downtime and outage windows for more than 200 machines.

  Can provide some tips, or anyone else has tried a similar upgrade path?

  Greetings.

  It seems that you have already upgraded your components N1k (are VEM upgraded to match?).

  Are your questions more info on how you upgrade/migration to a vcenter server to another?

  If you import your vcenter database to your new vcenter, it shouldn't have a lot of waste of time, as the VSM/VEM will always see the vcenter and N1k dVS.  If you change the vcenter server name/IP, but import the old vcenter DB, there are a few steps, you will need to ensure that the connection of VSM SVS corresponds to the new IP address in vcenter.

  If you try to create a new additional vcenter in parallel, then you will have problems of downtime as the name of port-profiles/network programming the guestVMs currently have will lose their 'support' info if you attempt to migrate, because you to NIC dVS standard or generic before the hosts for the new vcenter.

  If you are already on vcenter 6, I believe you can vmotion from one host to another and more profile vswitch/dVS/port used.

  Really need more detail on how to migrate from a vcenter for the VCA 6.0.

  Thank you

  Kirk...

• Nexus 1000v, UCS, and Microsoft NETWORK load balancing

  Hi all

  I have a client that implements a new Exchange 2010 environment. They have an obligation to configure load balancing for Client Access servers. The environment consists of VMware vShpere running on top of Cisco UCS blades with the Nexus 1000v dvSwitch.

  Everything I've read so far indicates that I must do the following:

  1 configure MS in Multicast mode load balancing (by selecting the IGMP protocol option).

  2. create a static ARP entry for the address of virtual cluster on the router for the subnet of the server.

  3. (maybe) configure a static MAC table entry on the router for the subnet of the server.

  3. (maybe) to disable the IGMP snooping on the VLAN appropriate in the Nexus 1000v.

  My questions are:

  1. any person running successfully a similar configuration?

  2 are there missing steps in the list above, or I shouldn't do?

  3. If I am disabling the snooping IGMP on the Nexus 1000v should I also disable it on the fabric of UCS interconnections and router?

  Thanks a lot for your time,.

  Aaron

  Aaron,

  The steps above you are correct, you need steps 1-4 to operate correctly.  Normally people will create a VLAN separate to their interfaces NLB/subnet, to prevent floods mcast uncessisary frameworks within the network.

  To answer your questions

  (1) I saw multiple clients run this configuration

  (2) the steps you are correct

  (3) you can't toggle the on UCS IGMP snooping.  It is enabled by default and not a configurable option.  There is no need to change anything within the UCS regarding MS NLB with the above procedure.  FYI - the ability to disable/enable the snooping IGMP on UCS is scheduled for a next version 2.1.

  
  
  This is the correct method untill the time we have the option of configuring static multicast mac entries on
  
  the Nexus 1000v.  If this is a feature you'd like, please open a TAC case and request for bug CSCtb93725 to be linked to your SR.
  
  This will give more "push" to our develpment team to prioritize this request.
  Hopefully some other customers can share their experience.
  Regards,

  Robert

• Nexus 1000v VSM compatibility with older versions of VEM?

  Hello everyone.

  I would like to upgrade our Nexus 1000v VSM 4.2 (1) SV1 (5.1) to 4.2 (1) SV2(2.1a) because we are heading of ESXi 5.0 update 3 to 5.5 ESXi in the near future. I was not able to find a list of compatibility for the new version when it comes to versions VEM, I was wondering if the new VSM supports older versions VEM, we are running, so I must not be upgraded all at once. I know that it supports two versions of our ESXi.

  Best regards

  Pete

  You found documentation, transfer of the station from 1.5 to latest code is supported in a VSM perspective.  Which is not documented is the small one on the MEC.  In general, the VSM is backward compatible with the old VEM (to a degree, the degree of which is not published).  Although it is not documented (AFAIK), verbal comprehension is that MEC can be a version or two behind, but you should try to minimize the time that you run in this configuration.

  If you plan to run mixed versions VEM when getting your upgraded hosts (totally fine that's how I do mine), it is better to move to this enhanced version of VEM as you upgrade the hypervisor.  Since you go ESXi 5.0 5.5, you create an ISO that contains the Cisco VIBs, your favorite driver async (if any), and the image of ESXi 5.5 all grouped together so the upgrade for a given host is all of a sudden.  You probably already have this cold technique, but the links generated by the Cisco tool below will show you how to proceed.  It also gives some URLS handy to share with each person performing functions on this upgrade.  Here is the link:

  Nexus 1000V and ESX upgrade utility

  PS - the new thing takes clones your VSMs offline.  Even if they are fairly easy to recover, having a real pure clone will save some sauce secret that otherwise you may lose in a failure scenario.  Just turn off a VSM, then right click and clone.  Turn on again this MSM and failover pair HA, then take to the bottom of it and get a clone of it.  So as a security measure, this upgrade, get your clones currently out of the current 1.5 VSMs, then some time after your upgrade some clones offline, saved from the new version.

• Change the maximum number of ports on Nexus 1000v vDS online with no distribution?

  Hello

  Change the maximum number of ports on Nexus 1000v vDS online with no distribution?

  
  

  I'm sure that's what the link

  VMware KB: Increase in the maximum number of vNetwork Distributed Switch (vDS) ports in vSphere 4.x

  not to say that

  I have 5.1 ESXi and vcenter

  Thank you
  Saami

  There is no downtime when you change quantity "vmware max-ports" a port profile. It can be done during production.

  You can also create a new profile of port with a test of the virtual machine and change the "vmware max-ports' If you want warm and ferrets.

• Upgrade to vCenter 4.0 with Cisco Nexus 1000v installed

  Hi all

  We have vCenter 4.0 and ESX 4.0 servers and we want to upgrade to version 4.1. But also Nexus 1000v installed on the ESX Server and vCenter.i found VMware KB which is http://kb.vmware.com/selfservice/microsites/search.do?language=en_US & cmd = displayKC & externalId = 1024641 . But only the ESX Server upgrade is explained on this KB, vCenter quid?  Our vcenter 4.0 is installed on Windows 2003 64-bit with 64-bit SQL 2005.

  We can upgrade vcenter with Nexsus plugin 1000v installed upgrading on-site without problem? And how to proceed? What are the effects of the plugin Nexus1000v installed on the server vcenter during update?

  Nexus1000v 4.0. (version 4).sv1(3a) has been installed on the ESX servers.

  Concerning

  Mecyon,

  Upgrading vSphere 4.0-> 4.1 you must update the software VEM (.vib) also.  The plugin for vCenter won't change, it won't be anything on your VSM (s).  The only thing you should update is the MEC on each host.  See the matrix previously posted above for the .vib to install once you're host has been updated.

  Note: after this upgrade, that you will be able to update regardless of your software of vSphere host or 1000v (without having to be updated to the other).  1000v VEM dependencies have been removed since vSphere 4.0 Update 2.

  Kind regards

  Robert

• iSCSI MPIO (Multipath) with Nexus 1000v

  Anyone out there have iSCSI MPIO successfully with Nexus 1000v? I followed the Cisco's Guide to the best of my knowledge and I tried a number of other configurations without success - vSphere always displays the same number of paths as it shows the targets.

  The Cisco document reads as follows:

  Before you begin the procedures in this section, you must know or follow these steps.

  •You have already configured the host with the channel with a port that includes two or more physical network cards.

  •You have already created the VMware kernel NIC to access the external SAN storage.

  •A Vmware Kernel NIC can be pinned or assigned to a physical network card.

  •A physical NETWORK card may have several cards pinned VMware core network or assigned.

  That means 'a core of Vmware NIC can be pinned or assigned to a physical NIC' average regarding the Nexus 1000v? I know how to pin a physical NIC with vDS standard, but how does it work with 1000v? The only thing associated with "pin" I could find inside 1000v was with port channel subgroups. I tried to create a channel of port with manuals subgroups, assigning values of sub-sub-group-id for each uplink, then assign an id pinned to my two VMkernel port profiles (and directly to ports vEthernet as well). But that doesn't seem to work for me

  I can ping both the iSCSI ports VMkernel from the switch upstream and inside the VSM, so I know Layer 3 connectivity is here. A strange thing, however, is that I see only one of the two addresses MAC VMkernel related on the switch upstream. Both addresses show depending on the inside of the VSM.

  What I'm missing here?

  Just to close the loop in case someone stumbles across this thread.

  In fact, it is a bug on the Cisco Nexus 1000v. The bug is only relevant to the ESX host that have been fixed in 4.0u2 (and now 4.1). Around short term work is again rev to 4.0u1. Medium-term correction will be integrated into a maintenance for the Nexus 1000V version.

  Our implementation of code to get the multipath iSCSI news was bad but allowed in 4.0U1. 4.0U2 no longer our poor implementation.

  For iSCSI multipath and N1KV remain 4.0U1 until we have a version of maintenance for the Nexus 1000V

• Problem with catalyst 12.8 working set memory?

  I run a system Win7 Ultimate x 64 with dual ATI HD5870s inside. After update Catalyst 12.8 today, I noticed a problem with the memory what work has been used by Firefox 14.0.1.

  IS REPRO STEPS
  (1) run Firefox
  (2) open Taskman, sort of working set
  3) http://www.kotaku.com
  (4) use mousewheel to scroll the pane to the right down - load the additional articles for review.

  If you scroll down a bit, you should see Firefox eat a few GB of working set memory in short order. The page starts answers incorrectly at the time and Firefox becomes unstable.

  Note: This problem only repros when Crossfire is enabled. Crossfire is off, there is no problem at all.

  I don't know if it's a v Crossfire Firefox thing, or something new, sent by 12.8 catalyst... but whatever it is, keep your eyes open. I don't have a way to solve this problem yet apart from the stop of Crossfire, which denies the reason why I went with a double solution map in the first place.

  Deactivation of Firefox > Options > advanced > General > browsing > use hardware acceleration when available solves the problem until Mozilla and AMD solve this problem

• ProBook G1 450: Problem with Catalyst Control Center

  So I'm a gamer and I want to improve my performance, so I searched around the internet and found a thing called the Catalyst Control Center and he had an option to Overclock, I thought it was a great idea to speed up my pc, so I downloaded it, but during the installation it says it found no compatible hardware? AFAIK the ProBook G1 450 have Intel HD 4600 Graphics and AMD Radeon HD8 8750 M, so what gives? Can I get help please?

  P.S. I checked the drivers and he said I had the latest drivers installed, so I have no idea what could be the problem.

  Try this driver http://h20564.www2.hp.com/hpsc/swd/public/detail?sp4ts.oid=5405166&swItemId=ob_154962_1&swEnvOid=4192

  If still happens once, respond with error message.

• A security update for Microsoft Visual C++ 2010 Redistributable Package (KB2467173) cause problem with Catalyst Control Center

  I use the HP Pavilion G6 1117tx with

  AMD Radeon HD 6470 M driver version 8.882.2.0 i.e. graphics card and

  Intel Graphics HD 3000 driver version 8.822.2.0, it came as a complete with

  Microsoft Visual C++ 2010 version 10.0.30319 on the site of sellers.

  And after I installed upgrading security for Microsoft Visual C++ 2010 Redistributable Package (KB2467173) it would cause a problem with the launch of the

  Catalyst Control Center version 2011.0817.2216.38121 the catalyst control center would launch and accident immediately but she always see the process running in the Task Manager.

  I removed all the drivers and the software associated with the control center catalyst with Microsoft Visual C++ 2010 and reinstalled all the package and tried the update, but still the same problem that led me to the conclusion the problem was with the update.

  Assistance would be appreciated. Thank you

  Good morning Mukul,

  Thank you for your response.

  I appreciate your time.

  Please refer to the suggestions marked as answer Andrew.Wu, Moderator on 24 January 2011 and check.
  https://social.msdn.Microsoft.com/forums/vstudio/en-us/10f5ba3a-b0bd-4f53-AC02-fa8634953dd0/Visual-Studio-2010-keeps-causing-display-driver-to-crash?Forum=VSSetup

  Note: Serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base:
  http://Windows.Microsoft.com/en-us/Windows/back-up-registry

  Please keep us updated on the status of the issue.

  Thank you