 Feedback
|
Table Of Contents
Cisco Nexus 1000V Release Notes, Release 4.2(1)SV2(1.1)
Software Compatibility with VMware
Software Compatibility with Cisco Nexus 1000V
Cross Data Center High-availability
Enhancement about the Headless Mode
Single VMware Data Center Support
Cisco NX-OS Commands Might Differ from Cisco IOS
DHCP Not Supported for the Management IP
VM Name Display Length Limitation
Copy Running-Config Startup-Config Command
Error Messages Appear During ESX 4.1.0 Server Bootup
Dynamic Entries Are Not Deleted For A Linux VM
Source Filter TX VLANs Are Missing After the VSM Restarts
Default SSH Inactive Session Timeout
Queueing Policy Cannot Be Changed In Flexible Upgrade Setup
Clear QoS Statistics Fails on the VSM
Platform, Infrastructure, Ports, Port Channel, and Port Profiles
Obtaining Documentation and Submitting a Service Request
Cisco Nexus 1000V Release Notes, Release 4.2(1)SV2(1.1)
Release Date: December 14, 2012Part Number: OL-27749-01 CO
Current Release: NX-OS Release 4.2(1)SV2(1.1)This document describes the features, limitations, and caveats for the Cisco Nexus 1000V Release 4.2(1)SV2(1.1) software. Use this document in combination with documents listed in the "Related Documentation" section. The following is the change history for this document.
OL-27749-01
A0
October 02, 2012
Created release notes for Release 4.2(1)SV2(1.1). Added vCD 5.1 support.
OL-27749-01
B0
December 06, 2012
Added a note about a VEM upgrade when LACP is configured to the "Software Compatibility with VMware" section.
OL-27749-01
C0
December 14, 2012
Updated support limit for "Distributed Virtual Switches (DVS) per vCenter with VMware vCloud Director (vCD)" in Table 1 Configuration Limits for Cisco Nexus 1000V .
Contents
This document includes the following sections:
•
Obtaining Documentation and Submitting a Service Request, page 20
Introduction
The Cisco Nexus 1000V provides a distributed, Layer 2 virtual switch that extends across many virtualized hosts. The Cisco Nexus 1000V manages a data center defined by the vCenter Server. Each server in the data center is represented as a line card in the Cisco Nexus 1000V and can be managed as if it were a line card in a physical Cisco switch.
The Cisco Nexus 1000V consists of the following components:
•
•
Software Compatibility
This section includes the following topics:
•
•
Software Compatibility with VMware
The servers that run the Cisco Nexus 1000V VSM and VEM must be in the VMware Hardware Compatibility list. This release of the Cisco Nexus 1000V supports vSphere 4.1.0, 5.0.0, and 5.1.0 release trains. For additional compatibility information, see the Cisco Nexus 1000V Compatibility Information, Release 4.2(1)SV2(1.1).
Note
Note
Software Compatibility with Cisco Nexus 1000V
This release supports hitless upgrades from Release 4.0(4)SV1(3a) and later releases. Upgrades are supported from 4.0(4)SV1(3) and earlier releases. For additional information, see the Cisco Nexus 1000V Software Upgrade Guide, Release 4.2(1)SV2(1.1).
ISSU Upgrades
Performing an ISSU from Cisco Nexus 1000V Release 4.2(1)SV1(4a) or Release 4.2(1)SV1(4b) to Cisco Nexus 1000V Release 4.2(1)SV2(1.1) using ISO files is not supported. You must use kickstart and system files to perform an ISSU upgrade to Cisco Nexus 1000V Release 4.2(1)SV2(1.1).
New and Changed Information
This section provides the following information about Cisco Nexus 1000V Release 4.2(1)SV2(1.1):
Changed Software Features
The following software features were changed in Cisco Nexus 1000V Release 4.2(1)SV2(1.1):
Installer Enhancements
The Cisco Nexus 1000V Installer App is now a standalone Java application that can install the Cisco Nexus1000V VSM or VEM.
The Cisco Nexus 1000V Installer App supports a single pane for invoking the Cisco Nexus1000V VSM installer and VEM installer.
For more information, see the Cisco Nexus 1000V Installation and Upgrade Guide.
New Software Features
The following software features were added in Cisco Nexus 1000V Release 4.2(1)SV2(1.1):
•
•
Release Support
This release supports VMware Release 5.1 and VMware vCloud Director 5.1.
Cross Data Center High-availability
This feature supports split Active and Standby Nexus 1000V Virtual Supervisor Modules (VSMs) across two data centers to implement cross-DC clusters and VM mobility while ensuring high availability.
DHCP Enhancements
Starting with Release 4.2(1)SV2(1.1), you can filter the traffic based on the source IP address only as opposed to filtering the traffic based on the IP-MAC Address pair. The Cisco Nexus 1000V ignores the MAC Address and validates only the source IP address of the traffic from the VMs. The new functionality is applicable to static bindings only, as in the case of dynamic bindings, a new MAC Address results in updating the dynamic binding on the Cisco Nexus 1000V.
To enable source IP based filtering on the Cisco Nexus 1000V switch, set the filter mode to ip filtering. The default filtering mode is ip-mac filtering.
Enhanced Installer App
This feature simplifies the entire installation process via a single pane of glass.
Enhanced Upgrade Process
Starting with Release 4.2(1)SV2(1.1), the upgrade process is simplified and flexible. You can schedule the upgrades on a per-host basis, enabling an incremental upgrade even during a short maintenance window.
Enhancement about the Headless Mode
If a VEM loses the connection to its VSM, the Vmotions to that particular VEM are blocked. The VEM shows up in the VCenter Server as having a degraded (yellow) status.
Licensing Changes
Starting with Release 4.2(1)SV2(1.1), a tier-based Licensing approach is adopted for the Cisco Nexus 1000V. The Cisco Nexus 1000V is shipped in two editions: Essential and Advanced. A new CLI command is provided to display the current switch edition and the other licensing information. In the two tier licensing model supported with Release 4.2(1)SV2(1.1), the software image is the same for both the editions. You can switch between the two editions at any time. The switch edition configuration is global. The entire switch (supervisor and all modules) is either in the Essential edition or the Advanced edition.
Essential Edition
When the Release 4.2(1)SV2(1.1) software is installed, the Essential edition is the default edition. When the switch is configured in the Essential edition, all the features (other than the advanced features) are available for free for unlimited time. No licenses are required to operate the Essential edition. The switch edition configuration is global and not per module. In Essential edition, all the modules are automatically licensed. Use the svs switch edition command to move the switch from the Essential edition to the Advanced edition and vice versa.
Advanced Edition
The switch will come up in the Advanced Edition when it is upgraded from a pre-4.2(1)SV2(1.1 release. When the license expires, the switch will not move from the Advanced edition to the Essential Edition automatically. You must use svs switch editon CLI command to downgrade to the Essential edition.The licenses are required only when the switch edition is configured as the Advanced edition.
The following features are available as advanced features that require licenses:
•
•
•
•
Use the feature cts command to configure the TrustSec feature on the Cisco Nexus 1000V switch. Enable DHCP Snooping, Dynamic ARP Inspection, and IP Source Guard features on the Cisco Nexus 1000V switch using the feature dhcp command. Refer to the Cisco Nexus 1000V License Configuration Guide for more information on licensing.
Split-Brain Enhancements
The high availability mechanism on Cisco Nexus 1000V is enhanced to select the VSM to be rebooted during the split-brain resolution. The following parameters are used to select the VSM in order of their precedence:
•
•
•
•
When a VSM is rebooted, the accounting logs that are stored on the VSM are lost. Starting with Release 4.2(1)SV2(1.1), new CLI commands are supported to display the accounting logs that were backed up during the split-brain resolution. You can also check the redundancy traces that are stored on the local and remote VSMs. Refer to the Cisco Nexus 1000V High Availability Configuration Guide for more information.
Support for Cisco TrustSec
The Cisco TrustSec security architecture builds secure networks by establishing clouds of trusted network devices. Each device in the cloud is authenticated by its neighbors. Communication on the links between devices in the cloud is secured with a combination of encryption, message integrity checks, and data-path replay protection mechanisms. Cisco TrustSec also uses the device and user identification information acquired during authentication for classifying, or coloring, the packets as they enter the network. This packet classification is maintained by tagging packets on ingress to the Cisco TrustSec network so that they can be properly identified for the purpose of applying security and other policy criteria along the data path. The tag, also called the Security Group Tag (SGT), allows the network to enforce the access control policy by enabling the endpoint device to act upon the SGT to filter traffic.
vCenter Plug-in
This feature provides a networking view to the server administrators of the virtual network from within VMware vCenter.
vTracker
This feature offers the VM-level and the host-level visibility to the network administrators into the virtual and the physical networks, for example, VM name and vMotion events.
Limitations and Restrictions
The Cisco Nexus 1000V has the following limitations and restrictions:
•
•
•
•
•
•
•
•
•
•
•
•
Configuration Limits
Table 1 shows the Cisco Nexus 1000V configuration limits:
Table 1 Configuration Limits for Cisco Nexus 1000V
Maximum Modules
66
Virtual Ethernet Module (VEM)
64
Virtual Supervisor Module (VSM)
The VSMs can be placed in different physical data centers.
Note that the previous restrictions requiring the active-standby VSMs in a single physical data center do not apply anymore.
Hosts
64
Active VLANs or VXLANs across all VEMs
2048 (any combination of VLANs and VXLANs)
MACs per VEM
32000
MACs per VLAN per VEM
4000
vEthernet interfaces per port profile
1024
PVLAN
512
Distributed Virtual Switches (DVS) per vCenter with VMware vCloud Director (vCD)
32
Distributed Virtual Switches (DVS) per vCenter without VMware vCloud Director (vCD)
32
vCenter Server connections
1 per VSM HA Pair1
Maximum latency between VSMs and VEMs
100ms
Virtual Service Domains (VSDs)
64
6
VSD interfaces
2048
216
vEthernet interfaces
2048
216
Port profiles
2048
—
System port profiles
32
32
Port channel
256
8
Physical trunks
512
—
Physical NICs
—
32
vEthernet trunks
256
8
ACL
128
162
ACEs per ACL
128
1282
ACL instances
2048
256
NetFlow policies
32
8
NetFlow instances
256
32
SPAN/ERSPAN sessions
64
64
QoS policy map
128
128
QoS class map
1024
1024
QoS instances
2048
256
Port security
2048
216
MultiCast groups
512
512
1 Only one connection to vCenter server is permitted at a time.
2 This number can be exceeded if VEM has available memory.
Single VMware Data Center Support
The Cisco Nexus 1000V can be connected to a single VMware vCenter Server datacenter object. Note that this virtual datacenter can span across multiple physical data centers.
VMotion of VSM
VMotion of the VSM has the following limitations and restrictions:
•
•
•
•
For more information about VMotion of VSM, see the Cisco Nexus 1000V Software Installation Guide, Release 4.2(1)SV2(1.1).
Access Lists
ACLs have the following limitations and restrictions:
Limitations:
•
•
•
Restrictions:
•
–
–
–
–
•
NetFlow
The NetFlow configuration has the following support, limitations, and restrictions:
•
•
•
•
•
•
The NetFlow cache table has the following limitation:
•
Note
Port Security
Port security has the following support, limitations, and restrictions:
•
The feature/no feature port-security command is not supported.•
•
•
Port Profiles
Port profiles have the following restrictions or limitations:
•
•
•
•
•
•
Telnet Enabled by Default
The Telnet server is enabled by default.
For more information about Telnet, see the Cisco Nexus 1000V Security Configuration Guide, Release 4.2(1)SV2(1.1).
SSH Support
Only SSH version 2 (SSHv2) is supported.
For more information, see the Cisco Nexus 1000V Security Configuration Guide, Release 4.2(1)SV2(1.1).
Cisco NX-OS Commands Might Differ from Cisco IOS
Be aware that the Cisco NX-OS CLI commands and modes might differ from those commands and modes used in the Cisco IOS software.
For information about CLI commands, see the Cisco Nexus 1000V Command Reference, Release 4.2(1)SV2(1.1).
Layer 2 Switching
This section lists the Layer 2 switching limitations and restrictions and includes the following topics:
For more information about Layer 2 switching, see the Cisco Nexus 1000V Layer 2 Switching Configuration Guide, Release 4.2(1)SV2(1.1).
No Spanning Tree Protocol
The Cisco Nexus 1000V forwarding logic is designed to prevent network loops so it does not need to use the Spanning Tree Protocol. Packets that are received from the network on any link connecting the host to the network are not forwarded back to the network by the Cisco Nexus 1000V.
Cisco Discovery Protocol
The Cisco Discovery Protocol (CDP) is enabled globally by default.
CDP runs on all Cisco-manufactured equipment over the data link layer and does the following:
•
•
–
If you disable CDP globally, CDP is also disabled for all interfaces.
For more information about CDP, see the Cisco Nexus 1000V System Management Configuration Guide, Release 4.2(1)SV2(1.1).
DHCP Not Supported for the Management IP
DHCP is not supported for the management IP. The management IP must be configured statically.
LACP
The Link Aggregation Control Protocol (LACP) is an IEEE standard protocol that aggregates Ethernet links into an EtherChannel.
The Cisco Nexus 1000V has the following restrictions for enabling LACP on ports carrying the control and packet VLANs:
Note
•
Note
•
Without spanning-tree PortFast on upstream switch ports, it takes approximately 30 seconds to recover these ports on the upstream switch. Because these ports are carrying control and packet VLANs, the VSM loses connectivity to the VEM.
The following commands are available to use on Cisco upstream switch ports in interface configuration mode:
–
–
–
DNS Resolution
The Cisco Nexus 1010 (1000V) cannot resolve a domain name or hostname to an IP address.
Interfaces
When the maximum transmission unit (MTU) is configured on an operationally up interface, the interface goes down and comes back up.
Layer 3 VSG
When a VEM communicates with Cisco VSG in Layer 3 mode, an additional header with 94 bytes is added to the original packet. You must set the MTU to a minimum of 1594 bytes to accommodate this extra header for any network interface through which the traffic passes between the Cisco Nexus 1000V and the Cisco VSG. These interfaces can include the uplink port profile, the proxy ARP router, or a virtual switch.
VM Name Display Length Limitation
VM names for VMs on ESX 4.1 hosts that exceed 21 characters are not displayed properly on the VSM. When you use a show vservice command that displays the port profile name, for example, the show vservice port brief port-profile port-profile-name command, only VMs with names that are 21 characters or less are displayed correctly. Longer VM names may cause the VM name to be truncated, or extra characters to be appended to the VM name. Depending on the network adapter, the name length limitation may vary. For example:
•
•
Workaround: This is a display issue with ESX Release 4.1 only. Use VM names of 21 characters or less to avoid this issue.
ISSU Upgrades
Performing an ISSU from Cisco Nexus 1000V Release 4.2(1)SV1(4) or Release 4.2(1)SV1(4a) to Cisco Nexus 1000V Release 4.2(1)SV2(1.1) using the ISO files is not supported. You must use the kickstart and the system files to perform an ISSU upgrade to Cisco Nexus 1000V Release 4.2(1)SV2(1.1).
Copy Running-Config Startup-Config Command
When running the copy running-config startup-config command, do not press the PrtScn key. If you do, the command will abort.
Error Messages Appear During ESX 4.1.0 Server Bootup
Vssnet-load error messages can occur during a classic ESX 4.1.0 server bootup or restart when the VEM is already installed. The issue occurs while booting up because the path environment variable is not set up properly, and the system is not able to identify the VMware command. After the system boots up, it is set up correctly and so is the ESX 4.10 system. There is no functional impact of the error messages and they can be ignored.
Dynamic Entries Are Not Deleted For A Linux VM
On a Linux VM that has multiple adapters, a DHCP release packet is sent from an incorrect interface (because of OS functionality) and the DHCP release packet is dropped. As a result, the binding entry is not deleted. This issue is a Linux issue where the packets from all interfaces go out of one interface (which is the default interface). To avoid this issue, put the interfaces in different subnets and make sure that the default gateways for each interface is set.
Source Filter TX VLANs Are Missing After the VSM Restarts
When a SPAN (erspan-source) session is created and the source interface is configured as a port channel and PVLAN Promiscuous access is programmed, the filter RX is not configured and the configured programmed filter TX is not persistent on VSM reload.
To work around this issue, configure all the primary and secondary VLANs as filter VLANs while using the port channel with PVLAN Promiscuous access as the source interface.
Default SSH Inactive Session Timeout
The default SSH inactive session timeout is 30 minutes, but the timeout setting is disabled by default, so the connection remains active. The exec-timeout command can be used to explicitly configure the inactive session timeout limit.
Queueing Policy Cannot Be Changed In Flexible Upgrade Setup
Queuing is valid starting from Cisco NX-OS Release 4.2(1)SV1(51). Any queueing configuration that exists on the VSM in an earlier release will stop working. All port profiles that have a queueing configuration cannot be used. If a port is down, it should be moved to a profile without QoS queueing.
Clear QoS Statistics Fails on the VSM
When a policy-map, of type queuing, having a class-map of type "match-any" without any match criteria, is applied on an interface, a resource pool is not created for that specific class ID. As a result, the collection of statistics fails and no data is sent back to the VSM. To work around this issue, add a match criteria on the empty class map.
Caveats
This section includes the following topics:
Open Caveats
The following are descriptions of the caveats in Cisco Nexus 1000V Release 4.2(1)SV2(1.1). The ID links you into the Cisco Bug Toolkit.
The caveats are listed in the following categories:
•
Platform, Infrastructure, Ports, Port Channel, and Port Profiles
Quality of Service
Features
VMware
Resolved Caveats
The following are descriptions of caveats that were resolved in Cisco Nexus 1000V Release 4.2(1)SV2(1.1). The ID links you into the Cisco Bug Toolkit.
MIB Support
The Cisco Management Information Base (MIB) list includes Cisco proprietary MIBs and many other Internet Engineering Task Force (IETF) standard MIBs. These standard MIBs are defined in Requests for Comments (RFCs). To find specific MIB information, you must examine the Cisco proprietary MIB structure and related IETF-standard MIBs supported by the Cisco Nexus 1000V Series switch.
The MIB Support List is available at the following FTP site:
ftp://ftp.cisco.com/pub/mibs/supportlists/nexus1000v/Nexus1000VMIBSupportList.html
Related Documentation
This section lists the documents used with the Cisco Nexus 1000V and available on Cisco.com at the following URL:
http://www.cisco.com/en/US/products/ps9902/tsd_products_support_series_home.html
General Information
Cisco Nexus 1000V Documentation Roadmap
Cisco Nexus 1000V Release Notes
Cisco Nexus 1000V Compatibility Information
Install and Upgrade
Cisco Nexus 1000V Installation and Upgrade Guide
Configuration Guides
Cisco Nexus 1000V High Availability and Redundancy Configuration Guide
Cisco Nexus 1000V Interface Configuration Guide
Cisco Nexus 1000V Layer 2 Switching Configuration Guide
Cisco Nexus 1000V License Configuration Guide
Cisco Nexus 1000V Network Segmentation Manager Configuration Guide
Cisco Nexus 1000V Port Profile Configuration Guide
Cisco Nexus 1000V Quality of Service Configuration Guide
Cisco Nexus 1000V Security Configuration Guide
Cisco Nexus 1000V System Management Configuration Guide
Cisco Nexus 1000V vCenter Plugin Configuration Guide
Cisco Nexus 1000V VXLAN Configuration Guide
Cisco Nexus 1000V vCenter Plugin Configuration Guide
Programming Guide
Cisco Nexus 1000V XML API User Guide
Reference Guides
Cisco Nexus 1000V Command Reference
Cisco Nexus 1000V MIB Quick Reference
Cisco Nexus 1000V Resource Availability Reference
Troubleshooting and
Cisco Nexus 1000V Troubleshooting Guide
Cisco Nexus 1000V Password Recovery Guide
Cisco NX-OS System Messages Reference
Virtual Services Appliance Documentation
The Cisco Nexus Virtual Services Appliance (VSA) documentation is available at
http://www.cisco.com/en/US/products/ps9902/tsd_products_support_series_home.html
Virtual Security Gateway Documentation
The Cisco Virtual Security Gateway documentation is available at http://www.cisco.com/en/US/products/ps11208/tsd_products_support_model_home.html
Virtual Network Management Center
The Cisco Virtual Network Management Center documentation is available at
http://www.cisco.com/en/US/products/ps11213/tsd_products_support_series_home.html
Virtual Wide Area Application Services (vWAAS)
The Virtual Wide Area Application Services documentation is available at
http://www.cisco.com/en/US/products/ps6870/tsd_products_support_series_home.html
ASA 1000V Cloud Firewall
The ASA 1000V Cloud Firewall documentation is available at
http://www.cisco.com/en/US/products/ps12233/tsd_products_support_series_home.html
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS Version 2.0.
This document is to be used in conjunction with the documents listed in the "Related Documentation" section.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)
Internet Protocol (IP) addresses used in this document are for illustration only. Examples, command display output, and figures are for illustration only. If an actual IP address appears in this document, it is coincidental.
© 2012 Cisco Systems, Inc. All rights reserved.
