Configuring Cisco Nexus 9000 Series Switches

This chapter contains the following sections:

Guidelines and Limitations

See the following guidelines and limitations for configuring Cisco Nexus 9000 Series switches through Cisco Nexus Data Broker.

  • Cisco Nexus Data Broker supports NX-API protocol for Cisco Nexus 9000 series family of devices starting with Release 7.x.

  • The NX-API device Edit option is not supported in the current release.

  • The devices that are going to provisioned by Cisco Nexus Data Broker are assumed to have LLDP enabled and the LLDP feature should not be disabled during the device association with Cisco Nexus Data Broker. If the LLDP feature is disabled, there might be an inconsistency in Cisco Nexus Data Broker that cannot be fixed without device deletion and re-addition.

  • Cisco Nexus Data Broker assumes that the device interfaces configured by the port definitions are L2 switch ports and these interfaces have device configurations as switchport trunk by default.

  • Cisco Nexus 9000 series devices do not support VLAN ID for the Edge Port, SPAN and Edge port, and the TAP interfaces.

  • If the devices that are added in the Cisco Nexus Data Broker are to be removed, the devices associated the port definitions and the connections should be removed first.

  • For Cisco Nexus 9000 Series switches, upgrade the Cisco NX-OS software to Cisco NX-OS Release 7.x or above.

  • You can now add a Cisco Nexus 9000 Series switch to the Cisco Nexus Data Broker that can be discovered through NX-API protocol. Once the connection is successful, all the line card information for chassis model 9500 is discovered.

  • Cisco Nexus Data Broker uses the TAP aggregation feature and the NX-API support for JSON-RPC.

  • Prior to deploying the Cisco Nexus 9000 Series switches for Tap/SPAN aggregation through Cisco Nexus Data Broker with NX-API mode, the following configurations should be completed:

    • Configure the ACL TCAM region size for IPV4 port ACLs or MAC port ACLs using the hardware access-list tcam region {ifacl | mac-ifacl} 1024 double-wide command on the switch.

    • Enable NX-API with feature manager CLI command on the switch.

    • Configure switchport mode trunk on all the inter-switch ports and the port-channels.

  • Prior to deploying the Cisco Nexus 9000 Series switches for Tap/SPAN aggregation through Cisco Nexus Data Broker with OpenFlow mode, enter the command hardware access-list tcam region openflow 512 at the prompt.

  • Cisco Nexus data broker periodically rediscovers the switch inventory, the topology interconnection, and the status. This information is updated in the GUI depending on the status. The rediscovery interval can be configured and the default value for the rediscovery interval is every 10 seconds.

Configuring TCAM Hardware Sizing on Cisco Nexus 9000 Series Switches

SUMMARY STEPS

    1.    Use the hardware access-list tcam region <region> <tcam-size> command to configure the following TCAM regions:


DETAILED STEPS
     Command or ActionPurpose
    Step 1 Use the hardware access-list tcam region <region> <tcam-size> command to configure the following TCAM regions:  

    • IPV4 PACL [ifacl] size = 1024

    • IPV6 PACL [ipv6-ifacl] size =    0

    • MAC PACL [mac-ifacl] size =  512

    • Egress IPV4 RACL [e-racl] size =  256

    • Egress IPV6 RACL [e-ipv6-racl] size =    0

    • Ingress System size =  256

    • Egress System size =  256

    • SPAN [span] size =  256

    • Ingress COPP [copp] size =  256

    See the Cisco Nexus 9000 Series NX-OS Security Configuration Guide for the step-by-step TCAM hardware sizing configuration on Cisco Nexus 9000 Series Switches.

     

    Enabling Cisco NX-API on Cisco Nexus 9000 Series Switches Using CLI

    You can now manage multiple Cisco Nexus 9000 Series switches that are connected in a topology. Cisco Nexus Data Broker pugin can discover the switch interconnections using LLDP and update the topology services within Cisco Nexus Data Broker. The switch interconnections can be a physical link or a port-channel interface. The topology displays only the interconnections between Cisco Nexus 9000 Series switches that are added to the Cisco Nexus Data Broker device list. The topology interconnection is displayed in the GUI.

    Complete the following steps for enabling Cisco NX-API on Cisco Nexus 9000 Series switches:

       Command or ActionPurpose
      Step 1 Enable the management interface.  

      Enable the management interface on the switch.

       
      Step 2switch# conf t  

      Enter the configuration mode.

       
      Step 3switch (config) # feature nxapi  

      Enable the NX-API feature.

       
      Step 4switch (config) # nxapi http port 80  

      Configure the HTTP port.

       
      Step 5switch (config) # nxapi https port 443  

      Configure the HTTPS port.

      For the step-by-step configuration information for enabling the NX-API feature on Cisco Nexus 9000 Series switches, see the Cisco Nexus 9000 Series NX-OS Programmability Guide.

       

      Enabling Switch Port Mode as Trunk on the Inter-switch Ports and Port Channels

      Complete the following steps to enable the switch port mode on the inter-switch ports and port-channels:

         Command or ActionPurpose
        Step 1switch(config)# config t  

        Enables the configuration mode.

         
        Step 2switch(config)# interface {{type slot/port} | {port-channel number}}  

        Specifies an interface to configure.

         
        Step 3switch(config-if)# switchport mode {access | trunk}  

        Configures the switchport mode as access or trunk on the inter-switch ports and the port-channels.

         
        Step 4switch(config)# exit  

        Exits the configuration mode.