DCICT Introduction to Nexus 1000V

Madhu Somu
CCIE,VCP
17-Jan-2013

2013 Cisco and/or its affiliates. All rights reserved.

 Congratulations on choosing the CCNA DC certification path!

This CCNA career path is for datacenter professionals who want to prove their technical expertise implementing & maintaining datacenter technologies & products at an associate level.

Webinars will be weekly on various topics Want to see a certain topic covered let us know! Guest speakers from various groups within Cisco Discussion threads for each Webinar topic created on Learning Network forum Any missed Webinars will be available shortly after the live delivery via recorded VOD

posted to Study Group

2013 Cisco and/or its affiliates. All rights reserved.

Data Center Technologies

1.0 Cisco data center fundamental concepts Describe network architectures for the data center (LAN, SAN) Describe the modular approach in network design Describe the data center core layer Describe the data center aggregation layer Describe the data center access layer Describe the collapse core model Describe Cisco FabricPath Identify key differentiator between DCI and network interconnectivity Describe, configure, and verify vPC Describe the functionality of and configure port channels Describe and configure VDC Describe the edge and core layers of the SAN Describe the Cisco Nexus product family Configure and verify network connectivity Identify control and data plane traffic Perform initial setup 2.0 Data center unified fabric Describe FCoE Describe FCoE multihop Describe VIFs Describe FEX products Perform initial setup 3.0 Storage networking Describe the initiator target Verify SAN switch operations Describe basic SAN connectivity Describe the different types of storage array connectivity Verify name server login Describe, configure, and verify zoning Perform initial setup Describe, configure, and verify VSAN Data center virtualization Describe device virtualization Describe server virtualization

4.0

Describe the Cisco Nexus 1000V Switch Verify initial setup and operation for the Cisco Nexus 1000V Switch
5.0 Unified computing Describe the Cisco UCS product family Describe the Cisco UCS Manager Describe, configure, and verify cluster configuration Describe and verify discovery operation Describe, configure, and verify connectivity Perform initial setup Describe the key features of the Cisco UCS Manager Data center network services Describe standard Cisco ACE features for load balancing Describe server load-balancing virtual context and high availability Describe server load-balancing management options Describe the benefits of the Cisco Global Load Balancing Solution Describe how the Cisco Global Load Balancing Solution integrates with local Cisco load balancers Describe the Cisco WAAS need and advantages in the data center
3

6.0

2013 Cisco and/or its affiliates. All rights reserved.

Visit http://cloudlab.cisco.com What is Cisco CloudLab? Cisco CloudLab provides a dedicated cloud based setup to for demonstrations and hands-on labs. Demos and labs consist of pre-packaged virtual Lab Pod (vPod) that can be used on-demand and without the need of advanced scheduling. How can I get access to Cisco CloudLab? Cisco CloudLab is available to Cisco employees, customers, channel and technology partners for training and demonstration usage. Access to Cisco CloudLab requires a valid Cisco.com (CCO) account which can be obtained free of charge. You must have a Cisco employee as sponsor in order to access Cisco CloudLab. Upon initial login you have the opportunity to specify your sponsor, who will receive an e-mail requesting verification of your need for access. Once that verification is received, your access will be enabled and you will receive a confirmation e-mail.
2013 Cisco and/or its affiliates. All rights reserved. 4

 2013 Cisco and/or its affiliates. All rights reserved.

 Given : Understanding of Basic Networking and Server Virtualization Basics Action : The Learner will be able to understand Virtual Machine Networking Concepts Result : Demonstrate understanding of Cisco Nexus1000v Switching platform and define

advanced Virtual Machine networking concepts such as adding server virtualization intelligence into the network.

Server Virtualization Issues Cisco Nexus 1000v Components and Architecture Port-Profiles Concepts - Policy Based VM Connectivity Advance Features

2013 Cisco and/or its affiliates. All rights reserved.

Think of Problems Virtual Machines create when it comes to Networking !

2013 Cisco and/or its affiliates. All rights reserved.

vMotion Moves VMs Across Physical Portsthe Network Policy Should Follow

2013 Cisco and/or its affiliates. All rights reserved.

Impossible to View or Apply Network Policy to Locally Switched Traffic

2013 Cisco and/or its affiliates. All rights reserved.

Need Shared Nomenclature Between Network Admin and Server Admin

Switch Supervisor Interface

2013 Cisco and/or its affiliates. All rights reserved.

VMware vCenter Manager

10

VMs on Wrong VLANs!

Host Server Admin must handle network configuration

vSwitch

Host

Host

Host

vSwitch

vSwitch

vSwitch

Server Admin

No Network Visibility or Control!

Unchaperoned VM-to-VM communication!

The rest of the network

No Policy and VLAN control!
2013 Cisco and/or its affiliates. All rights reserved.

Network Admin
11

 2013 Cisco and/or its affiliates. All rights reserved.

12

 Industrys most advanced software switch

VM

VM

VM

VM

for VMware vSphere

Built on Cisco NX-OS Compatible with all switches Compatible with all servers on the VMware
1000V VEM

vSphere

Hardware Compatibility List

Winner of VMWorld Best in Show 2008 and
Server

Cisco Most Innovative Product of 2009

1000V VSM

Physical Switches

2013 Cisco and/or its affiliates. All rights reserved.

13

Policy-Based VM Connectivity

Mobility of Network and Security Properties

Non-Disruptive Operational Model

Port Profiles WEB Apps HR DB DMZ

VM

VM

VM

VM

VM

VM

VM

VM

Nexus 1000V VEM

Nexus 1000V VEM

VM Connection Policy
Defined in the network Applied in Virtual Center Linked to VM UUID Server

vSphere

vSphere

Server

Physical Switches

VMware vCenter
2013 Cisco and/or its affiliates. All rights reserved.

Nexus 1000V VSM

14

n1000v# show port-profile name WebProfile port-profile WebServers description: status: enabled capability uplink: no system vlans: port-group: WebServers config attributes: switchport mode access switchport access vlan 110 no shutdown evaluated config attributes: switchport mode access switchport access vlan 110 no shutdown assigned interfaces: Veth10

Support Commands Include:

Port management VLAN

PVLAN
Port-Channel ACL Netflow Port security QoS

2013 Cisco and/or its affiliates. All rights reserved.

15

15

Policy-Based VM Connectivity

Mobility of Network and Security Properties

Non-Disruptive Operational Model

VMs Need to Move

VMotion DRS SW Upgrade/Patch Hardware Failure

VM

VM

VM

VM

VMVM

VMVM

VMVM

VMVM

Nexus 1000V VEM

Nexus 1000V VEM

Property Mobility
VMotion for the network Ensures VM security Maintains connection state Server

vSphere

vSphere

Server

Physical Switches

VMware vCenter
2013 Cisco and/or its affiliates. All rights reserved.

Nexus 1000V VSM

16

Policy-Based VM Connectivity

Mobility of Network and Security Properties

Non-Disruptive Operational Model

VI Admin Benefits
Maintains existing VM mgmt Reduces deployment time Improves scalability Reduces operational workload Enables VM-level visibility

VM

VM

VM

VM

VM

VM

VM

VM

Nexus 1000V VEM

Nexus 1000V VEM

vSphere

vSphere

Network Admin Benefits

Unifies network mgmt and ops Improves operational security

Server

Server

Enhances VM network features

Ensures policy persistence Enables VM-level visibility VMware vCenter
2013 Cisco and/or its affiliates. All rights reserved.

Physical Switches
Nexus 1000V VSM
17

 2013 Cisco and/or its affiliates. All rights reserved.

18

Comparison to a Physical Switch

Network Admin

Modular Switch Supervisor-1

Back Plane

Supervisor-2 Linecard-1 Linecard-2

Linecard-N

Server 1

Server 2

Server 3

Server Admin
19

2013 Cisco and/or its affiliates. All rights reserved.

Moving to a Virtual Environment

Network Admin

Modular Switch Supervisor-1

Back Plane

Supervisor-2 Linecard-1 Linecard-2

Linecard-N

Hypervisor Server Admin

2013 Cisco and/or its affiliates. All rights reserved.

Hypervisor

Hypervisor

20

Supervisors Virtual Supervisor Modules (VSMs)

Virtual Appliance
Network Admin
VSM1

VSM2

Modular Switch Supervisor-1

Back Plane

Supervisor-2 Linecard-1 Linecard-2

Linecard-N

Hypervisor
VSM: Virtual Supervisor Module

Hypervisor

Hypervisor

Server Admin
21

2013 Cisco and/or its affiliates. All rights reserved.

Linecards Virtual Ethernet Modules (VEMs)

Virtual Appliance
Network Admin
VSM1

VSM2

Modular Switch Supervisor-1

Back Plane

Supervisor-2 Linecard-1 Linecard-2

Linecard-N
VEM-1 VEM-2

VEM-N

Hypervisor
VSM: Virtual Supervisor Module VEM: Virtual Ethernet Module

Hypervisor

Hypervisor

Server Admin
22

2013 Cisco and/or its affiliates. All rights reserved.

VSM + VEMs = Nexus 1000 Virtual Chassis

Virtual Appliance
VSM1

200+ vEth ports per VEM

VSM2

2K vEths per N1K 64 VEMs per N1K (connected by L2 or L3) Multiple N1Ks can be created (under single VM

VEM-1 VSM: Virtual Supervisor Module VEM: Virtual Ethernet Module vEth: Virtual Ethernet port

VEM-2

L3 Mode

L2 Mode

management center)

VEM-N

Hypervisor

Hypervisor

Hypervisor

2013 Cisco and/or its affiliates. All rights reserved.

23

pod5-vsm# show module Mod Ports Module-Type --- ----- -------------------------------1 0 Virtual Supervisor Module 2 0 Virtual Supervisor Module 3 248 Virtual Ethernet Module

Model -----------------Nexus1000V Nexus1000V NA

Status -----------active * ha-standby ok

Cisco VSMs

2013 Cisco and/or its affiliates. All rights reserved.

24

 2013 Cisco and/or its affiliates. All rights reserved.

25

 Offloads setup and daily vSwitch tasks to

the network team

Provides a common nomenclature for

network and server teams to discuss network policy the port profile

2013 Cisco and/or its affiliates. All rights reserved.

26

26

 Enabled visibility and troubleshooting of

VM traffic
Standardizes workflow for virtual and BEFORE 1000V AFTER 1000V

physical networks
Overcomes hurdles to virtualize

applications with high bandwidth, highly secure applications (e.g. DMZ, regulatory, tier-1)

2013 Cisco and/or its affiliates. All rights reserved.

27

27

Switching Security Network Services Provisioning Visibility Management

2013 Cisco and/or its affiliates. All rights reserved.

VLAN/VXLAN, IGMP Snooping, QoS Marking (COS & DSCP), Class-based WFQ

Policy Mobility, Private VLANS, Access Control Lists , Port Security, Dynamic ARP inspection, IP Source Guard, DHCP Snooping

vPath technology to support services e.g. VSG, vWAAS

Automated vSwitch Config, Port Profiles, Virtual Centre Integration vMotion, NetFlow v.9 w/ NDE, CDP v.2, VM-Level Interface Statistics, SPAN & ERSPAN (policy-based)

Cisco CLI, Radius, TACACs, Syslog, SNMP (v.1, 2, 3

IPv6 Support: As a Layer-2 switch, Nexus 1000V supports forwarding of IPv6 packets as well as Layer-2 features such as PVLAN and Port Security. Also, management interface can be assigned an IPv6 address.
28

28

Virtual Appliance N1KV VSM ASA1KV vWAAS VSG vACE

NX-OS Control Plane

vPath: Virtual Service Datapath VXLAN: Virtual Extensible LAN

VEM
vPath VXLAN vPath

VEM
VXLAN vPath

VEM
VXLAN vPath

VEM
VXLAN

NX-OS Data Plane

ESX

Win8 Hyper-V*

XenServer**

KVM**

2013 Cisco and/or its affiliates. All rights reserved.

VSM: Virtual Supervisor Module VEM: Virtual Ethernet Module

29

 2013 Cisco and/or its affiliates. All rights reserved.

30

 Allows network administrators to manage the Nexus 1000V Virtual Supervisor Module

(VSM) as a standard Cisco switch, with all 1000V features

Physical appliance for virtual network services (VSM, NAM, etc.) Supported by CiscoWorks LAN Management Solution (LMS) The Nexus 1010 is a networking appliance to host four Nexus 1000V virtual supervisor

modules (VSM)

2013 Cisco and/or its affiliates. All rights reserved.

31

VSM on Virtual Machine

1000V VSM x 1

VSM on Nexus 1010

VM VM VM VM VM VM

VM

Nexus 1000V

Nexus 1000V VEM

vSphere

vSphere

Server
1000V VSM x 4

Server

Physical Switches

Cisco Nexus 1010

Physical Switches

2013 Cisco and/or its affiliates. All rights reserved.

32

Server Admin

Network Admin

Offload VSM Install/Mgmt to Network Team

Install The VSM Like a Standard Cisco Switch

VSM Doesnt Need VMware ESX Licensing

Prepare for VM Sprawl with Ample Scalability (256 Hosts Per Nexus 1010 Appliance)

2013 Cisco and/or its affiliates. All rights reserved.

33

Dedicated services appliance (NAM, etc.) Network Team manages the switch hardware Pure software deployment 64 hosts per VSM Installation like a standard Cisco switch 64 hosts per VSM, 4 VSMs, 256 hosts in total NX-OS high availability of VSM VEM running on vSphere 4 Enterprise Plus

NX-OS high availability of VSM

VEM running on vSphere 4 Enterprise Plus Nexus 1000V features and scalability

Nexus 1000V features and scalability

VSM on Virtual Machine

2013 Cisco and/or its affiliates. All rights reserved.

VSM on Nexus 1010

34

Virtual Appliance
ASA 1000V vWAAS VSG VSM
Primary

Nexus 1010 / 1010-X

VSM NAM VSG DCNM

VSM

NAM

VSG

DCNM

Secondary

Nexus 1010 / 1010-X

NX-OS based physical appliance vCenter access not required Network team deploys & manages it Up to 10 virtual blades on Nexus 1010-X

L3 Connectivity

Virtual Blades
Virtual Supervisor Module (VSM) Network Analysis Module (NAM) Virtual Security Gateway (VSG) Data Center Network Manager (DCNM)

VEM-1
vPath VXLAN

VEM-2
vPath VXLAN

VEM-1
vPath VXLAN

VEM-2
vPath VXLAN

ESX

Win8 Hyper-V*

XenServer**

KVM**

2013 Cisco and/or its affiliates. All rights reserved.

35

http://www.cisco.com/en/US/products/ps9902/prod_installation_guides_list.html
2013 Cisco and/or its affiliates. All rights reserved. 36

http://www.cisco.com/en/US/products/ps9902/products_installation_and_configuration_guides_list.html
2013 Cisco and/or its affiliates. All rights reserved. 37

http://www.cisco.com/en/US/products/ps9902/prod_command_reference_list.html
2013 Cisco and/or its affiliates. All rights reserved. 38

 Next Webinar: Thurs. Jan. 24th

Topic Introduction to Unified IO Cisco WAAS Overview NXOS Command Line [YOUR SUGGESTION HERE!] Introduction to Unified Computing System Introduction to FCoE Protocols Date Jan 24th Jan 31th Feb 7th Feb 14th Feb 21st Mar 7th Presenter Michael Brown Zac Seils Michael Brown TBD Robert Burns Ozden Karakok

Keep checking the Cisco Learning Network site for new sessions

https://learningnetwork.cisco.com/docs/DOC-16438
2013 Cisco and/or its affiliates. All rights reserved. 39

 Once you exit the session, your survey will open in your browser. How can we make these Webinars better? What topics do you want to see? Complete the quick survey for your change to win a free E-book from Cisco Winners selected from each session.
Congratulations for Last week Winners - Sam Chapman, Chris Kane !!!
2013 Cisco and/or its affiliates. All rights reserved. 40

Thank you.