Cisco Nexus 1000V Port Profile Configuration Guide, Release 4.0(4)SV1(3)
Creating Port Profiles
Downloads: This chapterpdf (PDF - 260.0KB) The complete bookPDF (PDF - 1.98MB) | Feedback

Creating Port Profiles

Table Of Contents

Creating Port Profiles

Information About Port Profiles

Port Profile States

Guidelines and Limitations

Default Settings

Configuring Port Profiles

Creating a Port Profile

Configuring VMware Attributes

Configuring Port Mode

Configuring a Trunking Profile

Configuring an Access Profile

Clearing a Port Management Policy

Adding a MAC or IP ACL to a Profile

Adding a NetFlow Flow Monitor to a Profile

Enabling a Port Profile

Removing a Port Profile

Feature History for Port Profiles


Creating Port Profiles


This chapter describes how to create, enable, or remove a port profile or add VMware attributes, access or trunk ports, ACLs, and NetFlow.

This chapter includes the following sections:

Information About Port Profiles

Guidelines and Limitations

Configuring Port Profiles

Feature History for Port Profiles

Information About Port Profiles

Port profiles simplify interface configuration by defining policies that can be reused for multiple interfaces. For more information about port profiles, see Chapter 1, "Overview."

Port Profile States

A port profile can be in one of two states: enabled or disabled. Port profiles are disabled by default. Table 2-1 describes port profile behavior in these two states.

To enable a port profile, see the "Enabling a Port Profile" procedure.

Table 2-1 Port Profile States  

State
Behavior

Disabled1

When disabled, a port profile behaves as follows:

Its configuration is not applied to assigned ports.

If exporting policies to a VMware port group, the port group is not created on the vCenter Server.

Enabled

When enabled, a port profile behaves as follows:

Its configuration is applied to assigned ports.

If inheriting policies from a VMware port group, the port group is created on the vCenter Server.

1 Disabled is the default.


Guidelines and Limitations

Use the following guidelines and limitations when configuring port profiles:

Once a port profile is created as either an Ethernet or vEthernet type, you cannot change the type.

In an installation where multiple Ethernet port profiles are active on the same VEM, it is recommended that they do not carry the same VLAN(s). The allowed VLAN list should be mutually exclusive. Overlapping VLANs can be configured but may cause duplicate packets to be received by virtual machines in the network.

Do not configure virtual port channel host mode (vPC-HM) on the Cisco Nexus 1000V if the upstream switches have vPC enabled. If vPC-HM is configured on the Cisco Nexus 1000V and vPC is configured on the upstream switch(es), the connection can be interrupted or disabled. For more information about vPC-HM, see the "Configuring Port Channels in Port Profiles" section on page 5-1.

The Cisco Nexus 1000V software must be initially configured. For information, see the Cisco Nexus 1000V Getting Started Guide, Release 4.2(1)SV1(4).

The Cisco Nexus 1000V must be connected to the vCenter Server.

Default Settings

Table 2-2 lists the default settings in the port profile configuration.

Table 2-2 Port Profile Defaults 

Parameter
Default

capability l3control

No

description

-

administrative state

all ports disabled

switchport mode (access or trunk)

access

system vlan vlan list

-

system mtu

1500

type

vEthernet

access port vlan

VLAN 1

vmware max-ports

32

vmware port-group name

Port profile name


Configuring Port Profiles

This section includes the following topics:

Creating a Port Profile

Configuring VMware Attributes

Configuring Port Mode

Adding a MAC or IP ACL to a Profile

Adding a NetFlow Flow Monitor to a Profile

Enabling a Port Profile

Removing a Port Profile

Creating a Port Profile

You can use this procedure to create a new port profile.

BEFORE YOU BEGIN

Before beginning this procedure, you must know or do the following:

You are logged in to the CLI in EXEC mode.

You know whether the ports need to be initialized with system settings.

You have identified the characteristics needed for this port profile.

SUMMARY STEPS

1. config t

2. port-profile [type {ethernet | vethernet}] name

3. (Optional) description profiledescription

4. show port-profile [brief | expand-interface | usage] [name profile-name]

5. copy running-config startup-config

DETAILED STEPS

 
Command
Description

Step 1 

config t


Example:

n1000v# config t

n1000v(config)#

Enters global configuration mode.

Step 2 

port-profile [type {ethernet | vethernet}] name


Example:

n1000v(config)# port-profile type ethernet AllAccess1

n1000v(config-port-prof)#

Enters port profile configuration mode for the named port profile. If the port profile does not already exist, it is created using the following characteristics:

name—The port profile name can be up to 80 characters and must be unique for each port profile on the Cisco Nexus 1000V.

type—(Optional) The port profile type can be Ethernet or vEthernet. Once configured, the type cannot be changed. The default is the vEthernet type.

Defining a port profile type as Ethernet allows the port profile to be used for physical (Ethernet) ports. In the vCenter Server, the corresponding port group can be selected and assigned to physical ports (PNICs).

Note If a port profile is configured as an Ethernet type, then it cannot be used to configure VMware virtual ports.

Step 3 

description profiledescription


Example:

n1000v(config-port-prof)# description all_access

n1000v(config-port-prof)#

(Optional) Adds a description of up to 80 ASCII characters in length to the port profile. This description is automatically pushed to vCenter Server.

Step 4 

show port-profile [brief | expand-interface | usage] [name profile-name]


Example:

n1000v(config-port-prof)# show port-profile name AllAccess1

(Optional) Displays the configuration for verification.

Step 5 

copy running-config startup-config


Example:

n1000v(config-port-prof)# copy running-config startup-config

(Optional) Saves the running configuration persistently through reboots and restarts by copying it to the startup configuration.

EXAMPLES

This example shows how to create a new port profile:

n1000v(config)# port-profile type ethernet AllAccess1
n1000v(config-port-prof)# description all_access
n1000v(config-port-prof)# show port-profile name AllAccess1
port-profile AllAccess1
  description: all_access
  type: ethernet
  status: disabled
  capability l3control: no
  pinning control-vlan: -
  pinning packet-vlan: -
  system vlans: none
  port-group:
  max ports: -
  inherit:
  config attributes:
  evaluated config attributes:
  assigned interfaces:
n1000v(config-port-prof)#

Configuring VMware Attributes

You can use this procedure to designate a port profile as a VMware port profile.

BEFORE YOU BEGIN

Before beginning this procedure, you must know or do the following:

You are logged in to the CLI in EXEC mode.

You know if you will configure the VMware port group with the same name as the port profile or if you will specify an alternate name for the VMware port group.

The vmware max-ports command is available only for non-uplink profiles.

You know if you want to restrict the maximum number of ports that can be assigned to the port profile. If so, you know what the maximum number is.

SUMMARY STEPS

1. config t

2. port-profile [type {ethernet | vethernet}] name

3. vmware port-group [pg_name]

4. vmware max-ports number

5. show port-profile [brief | expand-interface | usage] [name profile-name]

6. copy running-config startup-config

DETAILED STEPS

 
Command
Description/Result

Step 1 

config t


Example:

n1000v# config t

n1000v(config)#

Enters global configuration mode.

Step 2 

port-profile [type {ethernet | vethernet}] name


Example:

n1000v(config)# port-profile AccessProf

n1000v(config-port-prof)#

Enters port profile configuration mode for the named port profile. If the port profile does not already exist, it is created using the following characteristics:

name—The port profile name can be up to 80 characters and must be unique for each port profile on the Cisco Nexus 1000V.

type—(Optional) The port profile type can be Ethernet or vEthernet. Once configured, the type cannot be changed. The default is the vEthernet type.

Defining a port profile type as Ethernet allows the port profile to be used for physical (Ethernet) ports. In the vCenter Server, the corresponding port group can be selected and assigned to physical ports (PNICs).

Note If a port profile is configured as an Ethernet type, then it cannot be used to configure VMware virtual ports.

Step 3 

vmware port-group [pg_name]


Example:

n1000v(config-port-prof)# vmware port-group n1000v(config-port-prof)#

Designates the port profile as a VMware port group.

The port profile is mapped to a VMware port group of the same name unless you specify a name here. When you connect the VSM to vCenter Server, the port group is distributed to the virtual switch on the vCenter Server.

Step 4 

vmware max-ports num


Example:

n1000v(config-port-prof)# vmware max-ports 5

n1000v(config-port-prof)#


Designates the maximum number of ports that can be assigned to this non-uplink port profile. The default is 32 ports.

When the specified maximum number of ports is reached, no more ports can be assigned.

Step 5 

show port-profile [brief | expand-interface | usage] [name profile-name]


Example:

n1000v(config-port-prof)# show port-profile name AccessProf

(Optional) Displays the configuration for verification.

Step 6 

copy running-config startup-config


Example:

n1000v(config-port-prof)# copy running-config startup-config

(Optional) Saves the running configuration persistently through reboots and restarts by copying it to the startup configuration.

EXAMPLES

This example shows how to designate a port profile as a VMware port profile and set the maximum allowed ports to five:

Example: 
n1000v# config t
n1000v(config)# port-profile AccessProf
n1000v(config-port-prof)# vmware port-group
n1000v(config-port-prof)# vmware max-ports 5
n1000v(config-port-prof)# show port-profile name AccessProf
port-profile AccessProf
  description: allaccess4
  type: vethernet
  status: disabled
  capability l3control: no
  pinning control-vlan: 8
  pinning packet-vlan: 8
  system vlans: none
  port-group: AccessProf
  max ports: 5
  inherit:
  config attributes:
  evaluated config attributes:
  assigned interfaces:n1000v(config-port-prof)# 

Configuring Port Mode

You can use the following procedures to designate trunking or access ports and configure VLANs for an existing port profile.

Configuring a Trunking Profile

Configuring an Access Profile

BEFORE YOU BEGIN

Before beginning the procedures in this section, you must know or do the following:

You are logged in to the CLI in EXEC mode.

You know whether you are configuring the port profile as an access port or trunk port.

An access port transmits packets on only one untagged VLAN. You can specify the VLAN, and it becomes the access VLAN. If you do not specify a VLAN for an access port, that interface carries traffic only on the default VLAN 1.

A trunk port transmits untagged packets for the native VLAN and transmits encapsulated, tagged packets for all other VLANs.

You know the needed VLAN configuration for this port profile.

A VLAN must already be created on the switch before you can assign it to a port profile.

You know the VLAN ID for the VLAN that you are assigning.

VLAN 1 is the default VLAN. You cannot create, modify, or delete this VLAN.

In accordance with the IEEE 802.1Q standard, up to 4094 VLANs are supported. Table 2-3 describes the available VLAN ranges and their use.

Table 2-3 VLAN Ranges 

VLANs Numbers
Range
Usage

1

Normal

Cisco default. You can use this VLAN, but you cannot modify or delete it.

2-1005

Normal

You can create, use, modify, and delete these VLANs.

1006-4094

Extended

You can create, name, and use these VLANs. You cannot change the following parameters:

State is always active.

VLAN is always enabled.

You cannot shut down these VLANs.

3968-4047 and 4094

Internally allocated

These 80 VLANs, plus VLAN 4094, are allocated for internal device use. You cannot create, delete, or modify any VLANs within the block reserved for internal use.


Configuring a Trunking Profile

You can use this procedure to define a trunking port profile including the VLANs that are allowed on the interfaces.

BEFORE YOU BEGIN

Before beginning this procedure, you must know or do the following:

You are logged in to the CLI in EXEC mode.

You have already created the port profile using the "Creating a Port Profile" procedure.

You know the needed VLAN configuration for this port profile and that it is to be used in trunk mode.

A VLAN must already be created on the switch before you can assign it to a port profile.

You know the supported VLAN ranges described in Table 2-3.

If you do not configure allowed VLANs in this procedure, then the default VLAN 1 is used.

If you do not configure a native VLAN in this procedure, then the default VLAN 1 is used.

SUMMARY STEPS

1. config t

2. port-profile name

3. switchport mode {access | trunk}

4. no shutdown

5. switchport trunk allowed vlan {allowed-vlans | add add-vlans | except except-vlans | remove remove-vlans | all | none}

6. switchport trunk native vlan vlan-id

7. show port-profile [brief | expand-interface | usage] [name profile-name]

8. copy running-config startup-config

DETAILED STEPS

 
Command
Description

Step 1 

config t


Example:

n1000v# config t

n1000v(config)#

Enters global configuration mode.

Step 2 

port-profile name


Example:

n1000v(config)# port-profile TrunkProf

n1000v(config-port-prof)#

Enters port profile configuration mode for the named port profile.

Step 3 

switchport mode trunk


Example:

n1000v(config-port-prof)# switchport mode trunk

n1000v(config-port-prof)#


Designates that the interfaces are to be used as a trunking ports.

A trunk port transmits untagged packets for the native VLAN and transmits encapsulated, tagged packets for all other VLANs.

Step 4 

no shutdown


Example:

n1000v(config-port-prof)# no shutdown

n1000v(config-port-prof)#

Administratively enables all ports in the profile.

Step 5 

switchport trunk allowed vlan {allowed-vlans | add add-vlans | except except-vlans | remove remove-vlans | all | none}


Example:

n1000v(config-port-prof)# switchport trunk allowed vlan all

(Optional) Designates the port profile as trunking and defines VLAN access to it as follows:

allowed-vlans—Defines VLAN IDs that are allowed on the port.

add—Lists VLAN IDs to add to the list of those allowed on the port.

except—Lists VLAN IDs that are not allowed on the port.

remove—Lists VLAN IDs whose access is to be removed from the port.

all—Indicates that all VLAN IDs are allowed on the port, unless exceptions are also specified.

none—Indicates that no VLAN IDs are allowed on the port.

Note If you do not configure allowed VLANs, then the default VLAN 1 is used as the allowed VLAN.

Step 6 

switchport trunk native vlan vlan-id


Example:

n1000v(config-port-prof)# switchport trunk native vlan 3

(Optional) Sets the trunking native characteristics when the interface is in trunking mode.

If you do not configure a native VLAN, then the default VLAN 1 is used as the native VLAN.

Step 7 

show port-profile [brief | expand-interface | usage] [name profile-name]


Example:

n1000v(config-port-prof)# show port-profile TrunkProf

(Optional) Displays the configuration for verification.

Step 8 

copy running-config startup-config


Example:

n1000v(config-port-prof)# copy running-config startup-config

(Optional) Saves the running configuration persistently through reboots and restarts by copying it to the startup configuration.

EXAMPLES

This example shows how to configure a trunking port profile, allowing all VLANs, and setting VLAN 3 as its native VLAN.

Example: 
n1000v# config t
n1000v(config)# port-profile TrunkProf
n1000v(config-port-prof)# switchport mode trunk
n1000v(config-port-prof)# no shutdown
n1000v(config-port-prof)# switchport trunk allowed vlan all
n1000v(config-port-prof)# switchport trunk native vlan 3
n1000v(config-port-prof)# show port-profile name TrunkProf
port-profile TrunkProf
  description: 
  type: vethernet
  status: disabled
  capability l3control: no
  pinning control-vlan: -
  pinning packet-vlan: -
  system vlans: none
  port-group: 
  max ports: 32
  inherit: 
  config attributes:
    switchport mode trunk
    switchport trunk native vlan 3
    switchport trunk allowed vlan all
    no shutdown
  evaluated config attributes:
    switchport mode trunk
    switchport trunk native vlan 3
    switchport trunk allowed vlan all
    no shutdown
  assigned interfaces:
n1000v(config-port-prof)# 

Configuring an Access Profile

Use this procedure to add an access VLAN to the access port in an existing port profile.

BEFORE YOU BEGIN

Before beginning this procedure, you must know or do the following:

An access port transmits packets on only one untagged VLAN. You can specify the VLAN, and it becomes the access VLAN. If you do not specify a VLAN for an access port, that interface carries traffic only on the default VLAN 1.

SUMMARY STEPS

1. config t

2. port-profile name

3. switchport mode {access | trunk}

4. no shutdown

5. switchport access vlan vlan-id-access

6. show port-profile [brief | expand-interface | usage] [name profile-name]

7. copy running-config startup-config

DETAILED STEPS

 
Command
Description

Step 1 

config t


Example:

n1000v# config t

n1000v(config)#

Enters global configuration mode.

Step 2 

port-profile name


Example:

n1000v(config)# port-profile AccessProf

n1000v(config-port-prof)#

Enters port profile configuration mode for the named port profile.

Step 3 

switchport mode {access | trunk}


Example:

n1000v(config-port-prof)# switchport mode access

n1000v(config-port-prof)#

Designates the interfaces as either switch access ports (the default) or trunks.

Step 4 

no shutdown


Example:

n1000v(config-port-prof)# no shutdown

n1000v(config-port-prof)#

Administratively enables all ports in the profile.

Step 5 

switchport access vlan vlan-id-access.

Example:

n1000v(config-port-prof)# switchport access vlan 300

(Optional) Assigns an access VLAN ID to this port profile.

Note If you do not specify a VLAN ID, then VLAN 1 is used automatically.

Step 6 

show port-profile [brief | expand-interface | usage] [name profile-name]


Example:

n1000v(config-port-prof)# show port-profile AccessProf

(Optional) Displays the configuration for verification.

Step 7 

copy running-config startup-config


Example:

n1000v(config-port-prof)# copy running-config startup-config

(Optional) Saves the running configuration persistently through reboots and restarts by copying it to the startup configuration.

EXAMPLES

This example shows how to configure a port profile with switch access ports, enable the ports, and then add an access VLAN:

Example: 
n1000v# config t
n1000v(config)# port-profile AccessProf
n1000v(config-port-prof)# switchport mode access
n1000v(config-port-prof)# no shutdown
n1000v(config-port-prof)# switchport access vlan 300
n1000v(config-port-prof)# show port-profile name AccessProf
port-profile AccessProf
  description: allaccess4
  type: vethernet
  status: disabled
  capability l3control: no
  pinning control-vlan: -
  pinning packet-vlan: -
  system vlans: none
  port-group: AccessProf
  max ports: 5
  inherit: 
  config attributes:
    switchport mode access
    switchport access vlan 300
    no shutdown
  evaluated config attributes:
    switchport mode access
    switchport access vlan 300
    no shutdown
  assigned interfaces:
n1000v(config-port-prof)# 

Clearing a Port Management Policy

You can use this procedure to remove either of the following port management policies from an existing port profile configuration.

shutdown

switchport mode

BEFORE YOU BEGIN

Before beginning this procedure, you must know or do the following:

You are logged in to the CLI in EXEC mode.

Removing the shutdown configuration changes the state of the port profile ports to shutdown.

Removing the switchport mode converts the port profile ports to switch access ports.

After removing the configuration for an attribute, the attribute does not appear in show command output.

SUMMARY STEPS

1. config t

2. port-profile name

3. default {shutdown | switchport mode}

4. show port-profile [brief | expand-interface | usage] [name profile-name]

5. copy running-config startup-config

DETAILED STEPS

 
Command
Description

Step 1 

config t


Example:

n1000v# config t

n1000v(config)#

Enters global configuration mode.

Step 2 

port-profile name


Example:

n1000v(config)# port-profile AccessProf

n1000v(config-port-prof)#

Enters port profile configuration mode for the named port profile.

Step 3 

default {shutdown | switchport mode}

Example:

n1000v(config-port-prof)# default switchport mode

n1000v(config-port-prof)#

Removes either the shutdown or the switchport mode configuration from the port profile.

shutdown—Reverts port profile ports to the shutdown state

switchport mode—Reverts port profile ports to switch access ports.

Step 4 

show port-profile [brief | expand-interface | usage] [name profile-name]


Example:

n1000v(config-port-prof)# show port-profile name AccessProf

(Optional) Displays the configuration for verification.

EXAMPLES

This example shows how to change the administrative state of a port profile back to its default setting (all ports disabled):

n1000v# config t
n1000v(config)# port-profile AccessProf
n1000v(config-port-prof)# default shutdown
n1000v(config-port-prof)# show port-profile name AccessProf
port-profile AccessProf
  description: allaccess4
  type: vethernet
  status: disabled
  capability l3control: no
  pinning control-vlan: 8
  pinning packet-vlan: 8
  system vlans: none
  port-group: AccessProf
  max ports: 5
  inherit:
  config attributes:
    switchport mode access
  evaluated config attributes:
    switchport mode access
  assigned interfaces:
n1000v(config-port-prof)# 

Adding a MAC or IP ACL to a Profile

You can use this procedure to add one of the following access control list (ACL) to a port profile:

MAC ACL

IP ACL

BEFORE YOU BEGIN

Before beginning this procedure, you must know or do the following:

You are logged in to the CLI in EXEC mode.

You have already created the port profile using the "Creating a Port Profile" procedure.

You know the name of the IP or MAC access control list that you want to configure for this port profile.

You know the direction of packet flow for the access list.

For more information about ACLs, see the Cisco Nexus 1000V Security Configuration Guide, Release 4.2(1)SV1(4).

SUMMARY STEPS

1. config t

2. port-profile [type {ethernet | vethernet}] name

3. mac port access-group name {in | out}
ip port access-group name {in | out}

4. show port-profile [brief | expand-interface | usage] [name profile-name]

5. copy running-config startup-config

DETAILED STEPS

 
Command
Description

Step 1 

config t


Example:

n1000v# config t

n1000v(config)#

Enters global configuration mode.

Step 2 

port-profile [type {ethernet | vethernet}] name


Example:

n1000v(config)# port-profile AccessProf

n1000v(config-port-prof)#

Enters port profile configuration mode for the named port profile.

Step 3 

mac port access-group name {in | out}

ip port access-group name {in | out}


Example:

n1000v(config-port-prof)# mac port access-group allaccess4 out


Example:

n1000v(config-port-prof)# ip port access-group allaccess4 in

Adds the named ACL to the port profile for either in or outbound traffic.

Step 4 

show port-profile name profile-name


Example:

n1000v(config-port-prof)# show port-profile name AccessProf

(Optional) Displays the configuration for verification.

Step 5 

copy running-config startup-config


Example:

n1000v(config-port-prof)# copy running-config startup-config

(Optional) Saves the running configuration persistently through reboots and restarts by copying it to the startup configuration.

EXAMPLES

This example shows how to add a MAC ACL and an IP ACL to a port profile:

n1000v# config t
n1000v(config)# port-profile AccessProf
n1000v(config-port-prof)# mac port access-group allaccess4 out
n1000v(config-port-prof)# ip port access-group allaccess4 in
n1000v(config-port-prof)# show port-profile name AccessProf
port-profile AccessProf
  description: allaccess4 
  type: vethernet
  status: disabled
  capability l3control: no
  pinning control-vlan: -
  pinning packet-vlan: -
  system vlans: none
  port-group:
  max ports: 32
  inherit:
  config attributes:
    ip port access-group allaccess4 in
    mac port access-group allaccess4 out
  evaluated config attributes:
    ip port access-group allaccess4 in
    mac port access-group allaccess4 out
  assigned interfaces:n1000v(config-port-prof)# 

Adding a NetFlow Flow Monitor to a Profile

You can use this procedure to configure a NetFlow flow monitor for a port profile.

BEFORE YOU BEGIN

Before beginning this procedure, you must know or do the following:

You are logged in to the CLI in EXEC mode.

You have already created the port profile using the "Creating a Port Profile" procedure.

For more information about NetFlow, see the Cisco Nexus 1000V System Management Configuration Guide, Release 4.2(1)SV1(4).

SUMMARY STEPS

1. config t

2. port-profile [type {ethernet | vethernet}] name

3. ip flow monitor name {input | output}

4. show port-profile [brief | expand-interface | usage] [name profile-name]

5. copy running-config startup-config

DETAILED STEPS

 
Command
Description

Step 1 

config t


Example:

n1000v# config t

n1000v(config)#

Enters global configuration mode.

Step 2 

port-profile [type {ethernet | vethernet}] name


Example:

n1000v(config)# port-profile AccessProf

n1000v(config-port-prof)#

Enters port profile configuration mode for the named port profile.

Step 3 

ip flow monitor name {input | output}


Example:

n1000v(config-port-prof)# ip flow monitor allaccess4 output

n1000v(config-port-prof)#

Applies a named flow monitor to the port profile for either incoming (input) or outgoing (output) traffic.

Step 4 

show port-profile [brief | expand-interface | usage] [name profile-name]


Example:

n1000v(config-port-prof)# show port-profile name AccessProf

(Optional) Displays the configuration for verification.

Step 5 

copy running-config startup-config


Example:

n1000v(config-port-prof)# copy running-config startup-config

(Optional) Saves the running configuration persistently through reboots and restarts by copying it to the startup configuration.

EXAMPLES

This example shows how to configure a NetFlow flow monitor for the port profile:

n1000v# config t
n1000v(config)# port-profile AccessProf
n1000v(config-port-prof)# ip flow monitor allacces4 output
n1000v(config-port-prof)# show port-profile name AccessProf
port-profile AccessProf
  type: vethernet
  status: disabled
  capability l3control: no
  pinning control-vlan: -
  pinning packet-vlan: -
  system vlans: none
  port-group:
  max ports: 32
  inherit:
  config attributes:
    ip flow monitor allaccess4 output
  evaluated config attributes:
    ip flow monitor allaccess4 output
  assigned interfaces:n1000v(config-port-prof)# 

Enabling a Port Profile

You can use this procedure to enable an existing port profile.

BEFORE YOU BEGIN

Before beginning this procedure, you must know or do the following:

You are logged in to the CLI in EXEC mode.

You have already created the port profile using the "Creating a Port Profile" procedure.

SUMMARY STEPS

1. config t

2. port-profile [type {ethernet | vethernet}] name

3. state enabled

4. show port-profile [brief | expand-interface | usage] [name profile-name]

5. copy running-config startup-config

DETAILED STEPS

 
Command
Description

Step 1 

config t


Example:

n1000v# config t

n1000v(config)#

Enters global configuration mode.

Step 2 

port-profile [type {ethernet | vethernet}] name


Example:

n1000v(config)# port-profile AccessProf

n1000v(config-port-prof)#

Enters port profile configuration mode for the named port profile.

Step 3 

state enabled


Example:

n1000v(config-port-prof)# state enabled

n1000v(config-port-prof)#

Enables the port profile and applies its configuration to the assigned ports. If the port profile is a VMware port group, the port group will be created in the vswitch on vCenter Server.

Step 4 

show port-profile [brief | expand-interface | usage] [name profile-name]


Example:

n1000v(config-port-prof)# show port-profile name AccessProf

(Optional) Displays the configuration for verification.

Step 5 

copy running-config startup-config


Example:

n1000v(config-port-prof)# copy running-config startup-config

(Optional) Saves the running configuration persistently through reboots and restarts by copying it to the startup configuration.

EXAMPLES

This example shows how to enable a port profile:

n1000v# config t
n1000v(config)# port-profile AccessProf
n1000v(config-port-prof)# state enabled
n1000v(config-port-prof)# show port-profile name AccessProf
port-profile AccessProf
  description: allaccess4
  status: enabled
capability l3control: no
  pinning control-vlan: -
  pinning packet-vlan: -
  system vlans: none
  port-group:
  max ports: 32
  inherit:
  config attributes:
    channel-group auto mode on
  evaluated config attributes:
    channel-group auto mode on
  assigned interfaces:
n1000v(config-port-prof)#n1000v(config-port-prof)# 

Removing a Port Profile

You can use this procedure to remove a port profile.

BEFORE YOU BEGIN

Before beginning this procedure, you must know or do the following:

You are logged in to the CLI in EXEC mode.

If the port profile is inherited by another port profile, you need to remove the inheritance from the other port profile before removing this port profile. If you do not remove the inheritance first, the procedure fails. See Removing Inherited Policies from a Port Profile, page 3-4.

When you remove a port profile that is mapped to a VMware port group, the associated port group and settings within the vCenter Server are also removed.

SUMMARY STEPS

1. config t

2. (Optional) show port-profile usage name profile_name

3. no port-profile profile_name

4. show port-profile name profile_name

5. copy running-config startup-config

DETAILED STEPS

 
Command
Description

Step 1 

config t


Example:

n1000v# config t

n1000v(config)#

Enters global configuration mode.

Step 2 

show port-profile usage name profile_name


Example:

n1000v(config)# show port-profile usage name AccessProf

(Optional) Verifies if active interfaces use this port profile.

Note You cannot remove a port profile if there are active interfaces associated with it.

Step 3 

no port-profile profile_name

Example:

n1000v(config)# no port-profile AccessProf
n1000v(config)# 

Removes the port profile configuration and operational settings.

Step 4 

show port-profile name profile_name


Example:

n1000v(config)# show port-profile name 
AccessProf
ERROR: port-profile AccessProf does not 
exist
n1000v(config)#

(Optional) Verifies that the port profile does not exist.

Step 5 

copy running-config startup-config


Example:

n1000v(config-port-prof)# copy running-config startup-config

(Optional) Saves the running configuration persistently through reboots and restarts by copying it to the startup configuration.

EXAMPLES

This example shows how to remove a port profile:

n1000v# config t

n1000v(config)# show port-profile usage name AccessProf

--------------------------------------------------------------------------------

Port Profile Port Adapter Owner

--------------------------------------------------------------------------------

n1000v(config)# no port-profile AccessProf
n1000v(config)# show port-profile name AccessProf
ERROR: port-profile AccessProf does not exist
n1000v(config)# copy running-config startup-config

Feature History for Port Profiles

This section provides the feature history for port profiles.

Feature Name
Releases
Feature Information

Port Profiles

4.0(4)SV1(1)

This feature was introduced.

Port Profile Type

4.0(4)SV1(2)

Port profiles are configured as either Ethernet or vEthernet type. By default, a port profile is created as vEthernet type.

[no] capability uplink command

4.0(4)SV1(2)

The capability uplink command has been replaced with the port-profile [type {ethernet | vethernet}] name command. To configure a port profile with uplink capability, configure the port profile as an Ethernet type.

The no capability uplink command has been removed.