DCINX Lab Manual

Discovery 1. Explore Cisco Nexus Platform

Discovery 2. Configure User Management

Discovery 3. Configure VDC and User management

Discovery 4. Configure and verify vPC

Discovery 5. Configure FHRP protocols

Discovery 1. Explore Cisco Nexus Platform

Basic Commands

DC1-N7K-1(config)# sh version

DC1-N7K-1(config)# sh cli history

DC1-N7K-1(config)# sh vdc

DC1-N7K-1(config)# sh vdc membership

DC1-N7K-1(config)# sh module

DC1-N7K-1(config)# sh module 4

DC1-N7K-1(config)# sh environment

DC1-N7K-1(config)# sh vrf

DC1-N7K-1(config)# sh int status

DC1-N7K-1(config)# sh ip int brief

IP Interface Status for VRF "default"(1)

Interface IP Address Interface Status

DC1-N7K-1(config)# sh ip int brief vrf management

DC1-N7K-1(config)# sh clock

DC1-N7K-1(config)# dir

DC1-N7K-1(config)# sh feature

switch# show license usage

switch# show license host-id

License hostid: VDH=FOX064317SQ

N7K-VDC-A# show feature-set

Discovery 2. Configure User Management

User Account Create

DC2-N7K-1(config)# username Rakesh password cisco

VDC user Roles

Network-admin: - It only exists in default vdc. User with network-admin access can configure all the
chassis level configuration like reload, creation/deletion of VDC, allocation of interface to non-default
VDC etc.

Network-admin user use switchto vdc vdc_name command to access other non-default VDC from
default vdc.  Network-admin has the vdc-admin role in non-default VDC.

We can configure more than one network-admin users but as per the recommendation it should be as
minimum as well.

Network-operator: - Exists only in default VDC. Network-operator user can access non-default VDC
using switchto command from default VDC and will have vdc-operator access in non-default VDC.

User in this role can only view configuration and will not able to make any changes.
VDC-ADMIN: - VDC-ADMIN user can do configuration within the VDC. VDC-ADMIN and network-admin
can create/delete or modify user account within the VDC.

VDC-ADMIN can change the configuration of its own vdc; it cannot make any changes in other VDCs and
to the physical level configuration like reload etc.

we can also configure vdc-admin role to the user within default VDC. By doing it we can restrict user
access limited to default VDC only. He will not able to make any changes in other non default VDCs.

VDC-Operator: - It provides read-only access to the user limited to VDC only and hence VDC-operator
user cannot make any configuration change.