Product Overview
Features and Benefits
Flexibility and Scalability
• Software compatibility: Cisco NX-OS interoperates with Cisco products running any variant of the Cisco IOS Software operating system. Cisco NX-OS also interoperates with any networking OS that conforms to the networking standards listed as supported in this data sheet.
• Common software throughout the data center: Cisco NX-OS simplifies the data center operating environment and provides a unified OS designed to run all areas of the data center network, including the LAN, SAN, and Layer 4 through 7 network services.
• Modular software design: Cisco NX-OS is designed to support distributed multithreaded processing on symmetric multiprocessors (SMPs), multicore CPUs, and distributed line card processors. Computationally intensive tasks, such as hardware table programming, can be offloaded to dedicated processors distributed across the line cards. Cisco NX-OS modular processes are instantiated on demand each in a separate protected memory space. Thus, processes are started and system resources allocated only when a feature is enabled. The modular processes are governed by a real-time preemptive scheduler that helps ensure the timely processing of critical functions.
• Virtual device contexts (VDCs): Cisco NX-OS offers the capability to segment OS and hardware resources into virtual contexts that emulate virtual devices. Each VDC has its own software processes, dedicated hardware resources (physical interfaces, VLANs, routing table size, Virtual Routing and Forwarding (VRF), etc.), and independent management environment. VDCs are instrumental in the consolidation of separate networks onto a common infrastructure, maintaining the administrative boundary separation and fault isolation characteristics of physically separate networks while providing many of the operational cost benefits of a single infrastructure.
Availability
• Continuous system operation: Cisco NX-OS provides continuous system operation, permitting maintenance, upgrades, and software certification without service interruption. The combination of process modularity, modular patching, Cisco In Service Software Upgrade (ISSU) capability, and nonstop-forwarding (NSF) graceful restart mitigates the effects of software upgrades and other operations.
• Cisco ISSU: Cisco ISSU provides the capability to perform transparent software upgrades on platforms with redundant supervisors, minimizing downtime and allowing customers to integrate the newest features and functions with little or no negative effect on network operation.
• Quick development of enhancements and problem fixes: The modularity of Cisco NX-OS allows new features, enhancements, and problem fixes to be quickly integrated into the software. Thus, modular fixes can be developed, tested, and delivered in a short time span, meeting urgent timelines. These updated images can then be installed without disruption using Cisco ISSU.
• Process survivability: Critical processes are run in protected memory space and independently of each other and the kernel, providing granular service isolation and fault containment and enabling modular patching and upgrading and rapid restartability. Individual processes can be restarted independently without loss of state information and without affecting data forwarding, so that after an upgrade or failure, processes restart in milliseconds without negatively affecting adjacent devices or services. Processes with large amounts of state such as IP routing protocols are restarted using standards-based NSF graceful restart mechanisms; other processes use a local persistent storage service (PSS) to maintain their state.
• Stateful supervisor failover: Redundant supervisors are kept synchronized at all times to enable rapid stateful supervisor failover. Sophisticated checks are in place to help ensure that the state is consistent and reliable throughout the entire distributed architecture after failover occurs.
• Reliable interprocess communication: Cisco NX-OS facilitates reliable communication between processes to help ensure that all messages are delivered and properly acted on during failure and adverse conditions. This communication helps ensure process synchronization and state consistency across processes that may be instantiated on processors distributed over multiple supervisors and I/O modules.
• Redundant switched Ethernet out-of-band channels (EOBCs): Cisco NX-OS can make full use of redundant EOBCs for communication between control and I/O module processors.
• Network-based availability: Network convergence is optimized by providing tools and functions to make both failover and fallback transparent and fast. For example, Cisco NX-OS provides Spanning Tree Protocol enhancements such as Bridge Protocol Data Unit (BPDU) guard, loop guard, root guard, BPDU filters, and bridge assurance to help ensure the health of the Spanning Tree Protocol control plane; Unidirectional Link Detection (UDLD) Protocol; NSF graceful restart of routing protocols; millisecond timers for First-Hop Resiliency Protocols (FHRP); Shortest-Path First (SPF) optimizations such as link-state advertisement (LSA) pacing and incremental SPF; and IEEE 802.3ad link aggregation with adjustable timers.
Serviceability
• Troubleshooting and diagnostics: Cisco NX-OS is built with unique serviceability functions to enable network operators to take early action based on network trends and events, enhancing network planning and improving network operations center (NOC) and vendor response times. Smart Call Home, Cisco Generic Online Diagnostics (GOLD), and Cisco NX-OS Embedded Event Manager (EEM) are some of the features that enhance the serviceability of Cisco NX-OS.
• Switched Port Analyzer (SPAN): The SPAN feature allows an administrator to analyze all traffic between ports (called the SPAN source ports) by nonintrusively directing the SPAN session traffic to a SPAN destination port that has an external analyzer attached to it.
• Ethanalyzer: Cisco NX-OS includes a built-in packet analyzer to monitor and troubleshoot control plane traffic. The packet analyzer is based on the popular Wireshark open source network protocol analyzer.
• Smart Call Home: The Smart Call Home feature continuously monitors hardware and software components to provide email-based notification of critical system events. A versatile range of message formats is available for optimal compatibility with pager services, standard email, and XML-based automated parsing applications. It offers alert grouping capabilities and customizable destination profiles. This feature can be used, for example, to directly page a network support engineer, send an email message to a NOC, and employ Cisco AutoNotify services to directly generate a case with the Cisco Technical Assistance Center (TAC). This feature is a step toward autonomous system operation, enabling networking devices to inform IT when a problem occurs and helping ensure that the problem is acted on quickly, reducing time to resolution and maximizing system uptime.
• Cisco GOLD: Cisco GOLD is a suite of diagnostic facilities to verify that hardware and internal data paths are operating as designed. Boot-time diagnostics, continuous monitoring, and on-demand and scheduled tests are part of the Cisco GOLD feature set. This industry-leading diagnostics subsystem allows rapid fault isolation and continuous system monitoring critical in today's continuously operating environments.
• Cisco EEM: Cisco EEM is a powerful device and system management technology integrated into Cisco NX-OS. Cisco EEM helps customers harness the network intelligence intrinsic to the Cisco software and enables them to customize behavior based on network events as they happen.
• Cisco NetFlow: The Cisco NX-OS implementation of Netflow supports Version 5 and 9 exports as well as the Flexible NetFlow configuration model and the hardware-based Sampled NetFlow for enhanced scalability.
Manageability
• Programmatic XML interface: Based on the NETCONF industry standard, the Cisco NX-OS XML interface provides a consistent API for devices, enabling rapid development and creation of tools to enhance the network.
• Simple Network Management Protocol (SNMP): Cisco NX-OS complies with SNMPv1, SNMPv2c, and SNMPv3. A rich collection of MIBs is supported.
• Configuration verification and rollback: With Cisco NX-OS, the system operator can verify the consistency of a configuration and the availability of necessary hardware resources prior to committing the configuration. A device can thus be preconfigured and the verified configuration applied at a later time. Configurations also include checkpoints, to allow operators to roll back to a known good configuration as needed.
• Role-based access control (RBAC): With RBAC, Cisco NX-OS enables administrators to limit access to switch operations by assigning roles to users. Administrators can customize access and restrict it to the users who require it. Cisco NX-OS also provides a mechanism to distribute configuration of RBAC roles across devices running Cisco NX-OS for simplified deployment.
• Cisco Data Center Network Manager (DCNM): Cisco DCNM is a management solution dedicated to data center network operations. Cisco DCNM maximizes the overall data center infrastructure uptime and reliability, thereby enabling business continuity. Cisco DCNM is designed for the Cisco NX-OS product family.
• Connectivity Management Processor (CMP) support: Cisco NX-OS supports the use of a CMP for lights-out, remote management of the platform. The CMP aids operations by providing an out-of-band access channel to the Cisco NX-OS console.
Traffic Routing, Forwarding, and Management
• Ethernet switching: Cisco NX-OS is built to support high-density, high-performance Ethernet systems and provides a complete data center-class Ethernet switching feature set. The feature set includes IEEE 802.1D-2004 Rapid and Multiple Spanning Tree Protocols (802.1w and 802.1s), IEEE 802.1Q VLANs and trunks, 16,000-subscriber VLANs, IEEE 802.3ad link aggregation, private VLANs, cross-chassis private-VLANs, UDLD in aggressive and standard modes, VLAN Trunking Protocol (VTP) in transparent and off modes, and traffic suppression (unicast, multicast, and broadcast). Spanning Tree Protocol enables transparent upgrades using Cisco ISSU in Spanning Tree Protocol environments, BPDU guard, loop guard, root guard, BPDU filters, bridge assurance, and jumbo frame support.
• IP and routing: Cisco NX-OS supports a wide range of IP Version 4 and 6 (IPv4 and v6) services and routing protocols. Cisco NX-OS provides state-of-the-art implementations of the following routing protocols:
– Open Shortest Path First (OSPF) Protocol Versions 2 (IPv4) and 3 (IPv6)
– Intermediate System-to-Intermediate System (IS-IS) Protocol
– Border Gateway Protocol (BGP)
– Enhanced Interior Gateway Routing Protocol (EIGRP) for IPv4 and v6
– Routing Information Protocol Version 2 (RIPv2)
• The implementations of these protocols are fully compliant with the latest standards, providing modern enhancements and parameters such as 4-byte autonomous system numbers (ASNs) and incremental SPF, while shedding unutilized legacy functionality in favor of a lean implementation that improves feature velocity and system stability. Non-Stop Forwarding Graceful Restart (NSF-GR) is supported by all unicast protocols. All protocols support all interface types, including Ethernet interfaces, switched virtual interfaces (SVIs) and subinterfaces, PortChannels, tunnel interfaces, and loopback interfaces. The rich variety of routing protocols and functions is complemented by a broad collection of IP services, including the following:
– VRF (All routing protocols and IP services are VRF aware. Note that VRF support in this context does not imply support for BGP or Multiprotocol Label Switching (MPLS) IP VPNs as described in RFCs 2547 and 4364.)
– Dynamic Host Configuration Protocol (DHCP) Helper
– Unicast Reverse Path Forwarding (uRPF) for IPv4 and IPv6
– Hot-Standby Routing Protocol (HSRP) for IPv4
– Virtual Router Redundancy Protocol (VRRP) for IPv4
– Gateway Load Balancing Protocol (GLBP) for IPv4
– Enhanced object tracking
– Policy-Based Routing (PBR) for IPv4
– Generic Routing Encapsulation (GRE) tunneling
– Unicast Graceful Restart for all protocols in IPv4
– Unicast Graceful Restart for OPSFv3 in IPv6
• IP Multicast: Cisco NX-OS provides an industry-leading IP Multicast feature set. The Cisco NX-OS implementation lays the foundation for the future development of a rich portfolio of multicast-enabled network functions. Similar to the unicast routing protocols, Cisco NX-OS includes state-of-the-art implementations of the following multicast protocols and functions:
– Protocol Independent Multicast Version 2 (PIMv2)
– Source-Specific Multicast (SSM) for IPv4 and IPv6
– PIM Sparse Mode (Any-Source Multicast [ASM] for IPv4 and IPv6)
– Bidirectional PIM (Bidir PIM) for IPv4 and IPv6
– Anycast Rendezvous Point (Anycast-RP)
– Multicast NSF for IPv4 and v6
– RP-Discovery using bootstrap router (BSR): Auto-RP and static
– Internet Group Management Protocol (IGMP) Versions 1, 2, and 3 router role
– IGMPv2 host mode
– IGMP snooping
– Multicast Listener Discovery (MLD) Protocol Version 2 (for IPv6)
– Multicast Source Discovery Protocol (MSDP) (for IPv4 only)
• Quality of service (QoS): Cisco NX-OS supports a rich variety of QoS mechanisms, including classification, marking, queuing, policing, and scheduling. Modular QoS CLI (MQC) is supported for all QoS features. MQC can be used to provide uniform configurations across various Cisco platforms.
Network Security
• Cisco TrustSec: As part of the Cisco TrustSec security suite, Cisco NX-OS provides outstanding data confidentiality and integrity, supporting standard IEEE 802.1AE link-layer cryptography with 128-bit Advanced Encryption Standard (AES) cryptography. Link-layer cryptography helps ensure end-to-end data privacy while allowing the insertion of security service devices along the encrypted path. Security group access control lists (SGACLs), a new paradigm in network access control, are based on security group tags instead of IP addresses, enabling policies that are more concise and easier to manage due to their topology independence.
• Additional network security features: In addition to Cisco TrustSec, Cisco NX-OS delivers the following security features:
– Data path Intrusion Detection System (IDS) for protocol conformance checks
– Control Plane Policing (CoPP)
– Message-digest algorithm 5 (MD5) routing protocol authentication
– Cisco integrated security features, including Dynamic Address Resolution Protocol (ARP) Inspection (DAI), DHCP Snooping, and IP Source Guard
– Authentication, authorization, and accounting (AAA) and TACACS+
– Secure Shell (SSH) Protocol Version 2
– Simple Network Management Protocol Version 3 (SNMPv3) support
– Port Security
– IEEE 802.1x authentication and RADIUS support
– Layer 2 Cisco Network Admission Control (NAC) LAN port IP
– Policies based on MAC, IPv4 and IPv6 addresses supported by named ACLs (port-based ACLs [PACLs], VLAN-based ACLs [VACLs], and router-based ACLs [RACLs])
Product Specifications
Supported Standards
Table 1. IEEE Compliance
Table 2. RFC Compliance
Supported Hardware Components
• Cisco Nexus 7000 Series 10-Slot Chassis
• Cisco Nexus 7000 Series 10-Slot Fabric Module
• Cisco Nexus 7000 Series 10-Slot System Fan Tray
• Cisco Nexus 7000 Series 10-Slot Fabric Fan Tray
• Cisco Nexus 7000 Series 18-Slot Chassis
• Cisco Nexus 7000 Series 18-Slot Fabric Module
• Cisco Nexus 7000 Series 18-Slot Fan Tray
• Cisco Nexus 7000 6.0KW AC Power Supply Module
• Cisco Nexus 7000 7.5KW AC Power Supply Module
• Cisco Nexus 7000 Series Supervisor Module
• Cisco Nexus 7000 Series 32-Port 10 Gigabit Ethernet Module
• Cisco Nexus 7000 Series 48-Port 10/100/1000 Ethernet Module
• Cisco Nexus 7000 Series 48-Port 1GE SFP Ethernet Module
Licensing
Enterprise Package
• IP routing
– OSPF v2 and v3 (IPv4 and IPv6)
– IS-IS (IPv4)
– BGP (IPv4)
– EIGRP (IPv4 and IPv6)
• IP Multicast
– PIM: Sparse, Bidir, ASM, and SSM modes (IPv4 and IPv6)
– MSDP (IPv4)
• PBR (IPv4)
• GRE tunnels
Advanced Package
• VDCs
• Cisco TrustSec
Ordering Information
Table 3. Ordering Information
Cisco Services
For More Information